logo

Database

Improper resource allocation - Buffer overflow In cn.hutool:hutool-core

Description

hutool Buffer Overflow vulnerability hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-422772. NVD-2023-422773. OSV-2023-422774. GCVE-2023-42277

References

1. https://github.com/dromara/hutool/issues/32852. https://github.com/dromara/hutool/commit/9ba8f9ca5dd32441f2e0f150cb22fa178bb771d3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-3E8AE – Vulnerability | Fluid Attacks Database