Description

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

Remediation

References

https://github.com/dromara/hutool/issues/3103

Related Vulnerabilities

CVE-2017-11341 Vulnerability in npm package node-sass

CVE-2016-10541 Vulnerability in npm package shell-quote

CVE-2019-3580 Vulnerability in maven package org.openrefine:openrefine

CVE-2023-26129 Vulnerability in npm package bwm-ng

CVE-2020-28437 Vulnerability in npm package heroku-env

Severity

High

Classification

CWE-732 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Exploit Issue Tracking Mitigation Third Party Advisory