CVE-2025-56769: Hutool: komut enjeksiyonu

Açıklama (NVD)

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Özet bilgiler

Ürün

Hutool Hutool

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,34 (yüzdelik 28)

CWE

CWE-77

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-77