Description
Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
Remediation
References
https://github.com/dromara/hutool/issues/3103
Related Vulnerabilities
CVE-2021-23490 Vulnerability in npm package parse-link-header
CVE-2020-36048 Vulnerability in maven package org.webjars.npm:engine.io
CVE-2020-15813 Vulnerability in maven package org.graylog2:graylog2-server
CVE-2015-8031 Vulnerability in maven package org.jvnet.hudson.main:hudson-core
CVE-2023-29234 Vulnerability in maven package org.apache.dubbo:dubbo