Description

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

Remediation

References

https://github.com/dromara/hutool/issues/3285

Related Vulnerabilities

CVE-2022-31160 Vulnerability in maven package org.webjars:jquery-ui

CVE-2023-36665 Vulnerability in maven package org.webjars.npm:protobufjs

CVE-2023-37895 Vulnerability in maven package org.apache.jackrabbit:jackrabbit-standalone-components

CVE-2023-49068 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-api

CVE-2023-4316 Vulnerability in npm package zod

Severity

Critical

Classification

CWE-120 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Vendor Advisory