~ / search / GHSA-p7w9-8mxw-p3g7

GHSA-p7w9-8mxw-p3g7

Improper Certificate Validation in Hutool

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-22885

Packages

EcosystemPackageAffectedFixed in
Maven cn.hutool:hutool-http < 5.7.19 5.7.19

Details

As written in the advisory (Markdown source, shown as plain text).

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.

References

External links from the advisory. They lead to third-party sites.