Insecure Temporary File in HuTool

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-33695 · ADVISORY
• dromara/hutool · WEB
• dromara/hutool commit c33550f · WEB
• dromara/hutool · PACKAGE

cn.hutool:hutool-core のその他の脆弱性

• CVE-2023-51080高 7.5The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
• CVE-2023-51075高 7.5hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers…
• CVE-2023-42278高 7.5hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
• CVE-2023-42277緊急 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
• CVE-2023-42276緊急 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.