| Package | Affected versions | Patched versions |
|---|---|---|
| cn.hutool:hutool-all | ≤ 5.8.11 | |
| hutool | = 5.8.11 |
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free