Description
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
Remediation
References
https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html
https://github.com/dromara/hutool/issues/2042
Related Vulnerabilities
CVE-2016-6796 Vulnerability in maven package org.apache.tomcat:jasper
CVE-2023-34840 Vulnerability in npm package angular-ui-notification
CVE-2023-34616 Vulnerability in maven package com.progsbase.libraries:json
CVE-2017-16127 Vulnerability in npm package pandora-doomsday
CVE-2022-25851 Vulnerability in maven package org.webjars.npm:jpeg-js