CVE-2023-33695

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

Published: Jun 13, 2023
Updated: May 9, 2024
CVE: CVE-2023-33695
GHSA: GHSA-7mcw-xmx3-7p8m
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWEs:

CWE-732
CWE-377

Affected Software
References

Software	From	Fixed in
cn.hutool / hutool-core	-	5.8.19
hutool / hutool	-	5.8.17.x

https://github.com/dromara/hutool/commit/c33550f703f5d1d7dd71ad2992d79a5e5532ce2c
https://github.com/dromara/hutool/issues/3103

Vulnerability Database

289,871

CVE-2023-33695