CVE-2023-51080: High severity hutool vulnerability
Published Dec 27, 2023
·Updated
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
Other sources
The NumberUtil.toBigDecimal method in hutool-core was discovered to contain a stack overflow.
— GitHub
Affected Software
3 affected componentsFixes available
maven/cn.hutool:hutool-core>=5.8.22<=5.8.24
5.8.25
Hutool Hutool=5.8.23
Hutool Hutool>=5.8.22<5.8.25
Remediation
Patch Available
Event History
Dec 27, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Advisory Published
09:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-51080?
CVE-2023-51080 is considered a moderate severity vulnerability due to its potential for causing stack overflow leading to application crashes.
2
How do I fix CVE-2023-51080?
To fix CVE-2023-51080, upgrade hutool-core to version 5.8.25 or later.
3
Which versions of hutool-core are affected by CVE-2023-51080?
CVE-2023-51080 affects hutool-core version 5.8.23 specifically.
4
What component of hutool is impacted by CVE-2023-51080?
CVE-2023-51080 impacts the NumberUtil.toBigDecimal method in hutool-core.
5
Is there a known exploit for CVE-2023-51080?
As of now, there are no publicly reported exploits specifically targeting CVE-2023-51080.