Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Achibear

#25601of 53,624
9.8Total CVSS
Vulnerabilities · 1
PT-2023-19451
9.8
2023-01-31
Dromara · Hutool · CVE-2023-24163
**Name of the Vulnerable Software and Affected Versions** Dromara hutool versions prior to 5.8.21 **Description** The issue allows an attacker to execute arbitrary code via the aviator template engine. This is a SQL Injection vulnerability. **Recommendations** For versions prior to 5.8.21, update to version 5.8.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the aviator template engine until a patch is applied. Avoid using the aviator template engine in sensitive operations until the issue is resolved.