Description
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
Remediation
References
https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868
https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link
https://github.com/dromara/hutool/issues/3149
https://github.com/dromara/hutool/releases/tag/5.8.21
https://github.com/google/osv.dev/issues/2195
Related Vulnerabilities
CVE-2020-13920 Vulnerability in maven package org.apache.activemq:activemq-core
CVE-2022-4772 Vulnerability in maven package com.github.dgarijo:widoco
CVE-2023-26158 Vulnerability in maven package org.webjars.npm:mockjs
CVE-2021-39185 Vulnerability in maven package org.http4s:http4s-server
CVE-2021-43795 Vulnerability in maven package com.linecorp.armeria:armeria