CVE-2023-24162

9.8CRITICAL

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

发布于: 1/31/2023更新于: 3/27/2025
在NVD查看在MITRE查看

描述

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

AI分析AI驱动

受影响产品

hutoolhutool
5.8.11

参考资料