CVE-2023-24162

CRITICAL CVSS: 9.8 Published: 2023-01-31 Modified: 2026-06-17

Description

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

Affected Platforms

Hutool Hutool

Weakness Type

CWE-502, CWE-502

References