Description

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

Remediation

References

https://github.com/dromara/hutool/issues/3285

Related Vulnerabilities

CVE-2021-3815 Vulnerability in npm package @fabiocaccamo/utils.js

CVE-2023-35149 Vulnerability in maven package org.jenkins-ci.plugins:ease-plugin

CVE-2020-28472 Vulnerability in npm package aws-sdk

CVE-2020-28461 Vulnerability in npm package js-ini

CVE-2021-23490 Vulnerability in npm package parse-link-header

Severity

Critical

Classification

CWE-120 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Vendor Advisory