hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
References
Link Resource
https://github.com/dromara/hutool/issues/3421 Exploit Issue Tracking Third Party Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-27T00:00:00

Updated: 2023-12-27T20:56:23.053401

Reserved: 2023-12-18T00:00:00


Link: CVE-2023-51075

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-12-27T21:15:08.300

Modified: 2024-01-09T15:23:26.870


Link: CVE-2023-51075

JSON object: View

cve-icon Redhat Information

No data.

CWE