CVE-2023-24162
9.8CRITICALDeserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Publicado: 1/31/2023Atualizado: 3/27/2025
Descrição
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Análise IADesenvolvido por IA
Produtos Afetados
hutoolhutool
5.8.11
Referências
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory