Description
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Remediation
References
https://github.com/dromara/hutool/issues/3421
Related Vulnerabilities
CVE-2020-7785 Vulnerability in npm package node-ps
CVE-2022-25878 Vulnerability in npm package protobufjs
CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml
CVE-2020-28502 Vulnerability in npm package xmlhttprequest-ssl
CVE-2021-46037 Vulnerability in maven package net.mingsoft:ms-mcms