Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • M mall
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 0
    • Issues 0
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 2
    • Merge requests 2
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Infrastructure Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • shiwenhui
  • mall
  • Merge requests
  • !29

Open
Created Oct 24, 2023 by shiwenhui@shiwenhuiOwner
  • Report abuse
Report abuse

请升级cn.hutool:hutool-all组件版本以解决9个安全漏洞

  • Overview 0
  • Commits 1
  • Changes 1

将 cn.hutool:hutool-all 组件从5.4.1 版本升级至 5.8.21版本, 用于修复以下安全漏洞:

序号 漏洞编号 漏洞标题 漏洞级别
1 MPS-2023-2460 hutool < 5.8.12 反序列化漏洞 高危
2 MPS-jdrq-1ywv hutool <=5.8.17 存在SPEL命令执行风险 高危
3 MPS-2022-64977 Hutool 存在拒绝服务漏洞 中危
4 MPS-2022-68308 Hutool zip 拒绝服务漏洞 中危
5 MPS-2022-64976 Hutool 存在拒绝服务漏洞 中危
6 MPS-2022-64978 Hutool 存在拒绝服务漏洞 中危
7 MPS-2022-1000 Hutool 存在中间人劫持漏洞 中危
8 MPS-xd3s-4gev HuTool XML外部实体注入漏洞 中危
9 MPS-4soz-eyma Hutool createTempFile函数敏感信息泄漏漏洞 中危
        

注意 :此 PR 由您(或拥有此仓库权限的其他维护者)授权 墨菲安全 打开

了解更多:

  • 如何快速修复代码安全问题
Assignee
Assign to
Reviewer
Request review from
Time tracking
Source branch: fix_ckrn6mfbl82m4l68b92g