PT-2022-27591 · Dromara · Dromara Hutool

Tgao

·

CVE-2022-4565

·

Published

2022-12-16

·

Updated

2024-01-25

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Dromara HuTool versions up to 5.8.10
Description A vulnerability was found in Dromara HuTool that affects the file cn.hutool.core.util.ZipUtil.java, leading to resource consumption. The attack can be initiated remotely.
Recommendations For versions up to 5.8.10, upgrade to version 5.8.11 to address this issue.

Exploit

Fix

Improper Resource Release

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-404CWE-400

Related Identifiers

CVE-2022-4565
GHSA-47VX-FQR5-J2GW

Affected Products

Dromara Hutool