PT-2023-31755
CVE-2023-51075
·
Published
2023-12-27
·
Updated
2025-09-05
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
hutool-core version 5.8.23
Description
The issue is related to an infinite loop in the
StrSplitter.splitByRegex function, which can be exploited by attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters, parameter1 and parameter2.Recommendations
For hutool-core version 5.8.23, consider disabling the
StrSplitter.splitByRegex function until a patch is available to prevent potential Denial of Service (DoS) attacks.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾