What is GHSA-6c25-cxcc-pmc4?

GHSA-6c25-cxcc-pmc4 is a security advisory published by GitHub Security Advisories with Critical severity. Dromara hutool vulnerable to SQL Injection

Which CVE IDs does GHSA-6c25-cxcc-pmc4 cover?

GHSA-6c25-cxcc-pmc4 covers the following CVE IDs: CVE-2023-24163. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6c25-cxcc-pmc4?

GHSA-6c25-cxcc-pmc4 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-6c25-cxcc-pmc4?

GHSA-6c25-cxcc-pmc4 affects 1 product, including: maven/cn.hutool:hutool-all:\u003c 5.8.21.

GHSA-6c25-cxcc-pmc4CriticalCVSS 9.8

Dromara hutool vulnerable to SQL Injection

Vendor

GitHub Security Advisories

Published

January 31, 2023

Last Modified

May 16, 2024

🔗 CVE IDs covered (1)

CVE-2023-24163 →

📋 Description

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine.

🎯 Affected products1

maven/cn.hutool:hutool-all:< 5.8.21

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2023-24163
https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868
https://github.com/dromara/hutool/issues/3149
https://github.com/google/osv.dev/issues/2195
https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link
https://github.com/dromara/hutool/releases/tag/5.8.21
https://github.com/advisories/GHSA-6c25-cxcc-pmc4