The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
References
| Link | Resource |
|---|---|
| https://github.com/dromara/hutool/issues/3423 | Exploit Issue Tracking Patch |
| https://github.com/dromara/hutool/issues/3423 | Exploit Issue Tracking Patch |
Configurations
History
12 Sep 2025, 19:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hutool:hutool:*:*:*:*:*:*:*:* |
21 Nov 2024, 08:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/dromara/hutool/issues/3423 - Exploit, Issue Tracking, Patch |
04 Jan 2024, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/dromara/hutool/issues/3423 - Exploit, Issue Tracking, Patch | |
| CPE | cpe:2.3:a:hutool:hutool:5.8.23:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-787 |
27 Dec 2023, 21:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-27 21:15
Updated : 2025-09-12 19:42
NVD link : CVE-2023-51080
Mitre link : CVE-2023-51080
CVE.ORG link : CVE-2023-51080
JSON object : View
Products Affected
hutool
- hutool
CWE
CWE-787
Out-of-bounds Write
