CVE-2023-42278

Description

hutool v5.8.21 was discovered to contain a buffer overflow via the component `JSONUtil.parse()`.

Affected packages (2)

• Maven/cn.hutool:hutool-corefrom 0, < 5.8.22
• Maven/cn.hutool:hutool-jsonfrom 0, < 5.8.22

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-42278
• PATCHhttps://github.com/dromara/hutool
• WEBhttps://github.com/dromara/hutool/commit/5c4486b9f58a83f283868135138f6ff3741b8c12
• WEBhttps://github.com/dromara/hutool/issues/3289