GitHub Advisoryadvisory · Maven

GHSA-m5hf-m3r2-xq53 hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method

HIGH Published 2023-12-27 Modified 2024-01-09 Official page ↗

Aliases: CVE-2023-51080
Ecosystem: Maven
Packages: cn.hutool:hutool-core
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-787
Reviewed: 2024-01-03

Affected packages

• Maven cn.hutool:hutool-core: >= 5.8.22, < 5.8.25 → fixed in 5.8.25

Description

The NumberUtil.toBigDecimal method in hutool-core was discovered to contain a stack overflow.

Related

Alias · CVE (1)

CVE-2023-51080 The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow. vulnerability

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References