Описание
A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.8.11 is able to address this issue. It is recommended to upgrade the affected component. VDB-215974 is the identifier assigned to this vulnerability.
Ссылки
- ExploitThird Party Advisory
- Permissions RequiredThird Party Advisory
- ExploitThird Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.8.10 (включая)
cpe:2.3:a:hutool:hutool:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00273
Низкий
4.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-404
CWE-404
Связанные уязвимости
CVSS3: 7.5
github
около 3 лет назад
HuTool vulnerable to Uncontrolled Resource Consumption
EPSS
Процентиль: 50%
0.00273
Низкий
4.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-404
CWE-404