Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Achibear

#25553de 53,633
9.8CVSS total
Vulnerabilidades · 1
PT-2023-19451
9.8
2023-01-31
Dromara · Hutool · CVE-2023-24163
**Name of the Vulnerable Software and Affected Versions** Dromara hutool versions prior to 5.8.21 **Description** The issue allows an attacker to execute arbitrary code via the aviator template engine. This is a SQL Injection vulnerability. **Recommendations** For versions prior to 5.8.21, update to version 5.8.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the aviator template engine until a patch is applied. Avoid using the aviator template engine in sensitive operations until the issue is resolved.