Lucene search
GoogleOSV:CVE-2023-24163HistoryJan 31, 2023 - 4:15 p.m.
CVE-2023-24163
2023-01-3116:15:09
Google
osv.dev
8
cve-2023-24163
sql injection
dromara hutool
code execution
aviator template engine
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
65.0%
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
Related
prion
prion
Sql injection
2023-01-31 16:15:00
nvd
nvd
CVE-2023-24163
2023-01-31 16:15:09
osv
osv
Dromara hutool vulnerable to SQL Injection
2023-01-31 18:30:23
cvelist
cvelist
CVE-2023-24163
2023-01-31 00:00:00
gitlab
gitlab
cve
cve
CVE-2023-24163
2023-01-31 16:15:09
github
github
Dromara hutool vulnerable to SQL Injection
2023-01-31 18:30:23
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
65.0%
Related for OSV:CVE-2023-24163