hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-51080 · ADVISORY
• dromara/hutool · WEB
• dromara/hutool commit c45b3fc · WEB
• dromara/hutool · PACKAGE

Weitere Schwachstellen in cn.hutool:hutool-core

• CVE-2023-51075HOCH 7.5hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers…
• CVE-2023-42278HOCH 7.5hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
• CVE-2023-42277KRITISCH 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
• CVE-2023-42276KRITISCH 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
• CVE-2023-3276HOCH 7.5A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function …