GitHub Advisoryadvisory · Maven

GHSA-47vx-fqr5-j2gw HuTool vulnerable to Uncontrolled Resource Consumption

HIGH Published 2022-12-16 Modified 2022-12-22 Official page ↗
Aliases
CVE-2022-4565
Ecosystem
Maven
Packages
cn.hutool:hutool-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-404
Reviewed
2022-12-16

Affected packages

• Maven cn.hutool:hutool-core: < 5.8.11 → fixed in 5.8.11

Description

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component.

Related

Alias · CVE (1)

  • CVE-2022-4565 A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-404 Improper Resource Shutdown or Release weakness

References