Fbdhhhh

**Name of the Vulnerable Software and Affected Versions** Dromara HuTool versions up to 5.8.19 **Description** A problematic issue has been found in the XML Parsing Module, specifically affecting the `readBySax` function of the `XmlUtil.java` file. This issue leads to xml external entity reference. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** For versions up to 5.8.19, as a temporary workaround, consider disabling the `readBySax` function of the `XmlUtil.java` file until a patch is available. Restrict access to the XML Parsing Module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.