Dromara · Hutool · CVE-2023-24163
**Name of the Vulnerable Software and Affected Versions**
Dromara hutool versions prior to 5.8.21
**Description**
The issue allows an attacker to execute arbitrary code via the aviator template engine. This is a SQL Injection vulnerability.
**Recommendations**
For versions prior to 5.8.21, update to version 5.8.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the aviator template engine until a patch is applied. Avoid using the aviator template engine in sensitive operations until the issue is resolved.