CVE-2023-51075

Summary

CVE-2023-51075 is a newly disclosed vulnerability affecting hutool-core version 5.8.23. The issue lies in the StrSplitter.splitByRegex function, which contains an infinite loop. An attacker can exploit this flaw by manipulating the first two parameters to trigger the infinite loop, leading to a Denial of Service (DoS) condition. This vulnerability poses a significant risk for systems that utilize hutool-core in their operations, and it is recommended that users upgrade to the latest version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.