Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-56769 1 Hutool 1 Hutool 2025-10-03 6.5 Medium
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
CVE-2018-17297 1 Hutool 1 Hutool 2024-11-21 N/A
The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.