CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

Date published : 2023-01-31

https://gitee.com/dromara/hutool/issues/I6AEX2

https://github.com/dromara/hutool/issues/2855