GitHub Advisoryadvisory · Maven
GHSA-rxgf-r843-g53h hutool Buffer Overflow vulnerability
CRITICAL
Official page ↗
- Aliases
- CVE-2023-42276
- Ecosystem
- Maven
- Packages
- cn.hutool:hutool-core, cn.hutool:hutool-json
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-120
- Reviewed
- 2023-09-11
Affected packages
• Maven cn.hutool:hutool-core: <= 5.8.21 (no fix yet)
• Maven cn.hutool:hutool-json: <= 5.8.21 (no fix yet)
Description
hutool v5.8.21 was discovered to contain a buffer overflow via the component `jsonArray`.
Related
Alias · CVE (1)
- CVE-2023-42276 hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. vulnerability
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness