~ / search / GHSA-6c25-cxcc-pmc4

GHSA-6c25-cxcc-pmc4

Dromara hutool vulnerable to SQL Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-24163

Packages

EcosystemPackageAffectedFixed in
Maven cn.hutool:hutool-all < 5.8.21 5.8.21

Details

As written in the advisory (Markdown source, shown as plain text).

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine.

References

External links from the advisory. They lead to third-party sites.