High severityNVD Advisory· Published Dec 27, 2023· Updated Apr 17, 2025

CVE-2023-51075

Description

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
cn.hutool:hutool-coreMaven	< 5.8.24	5.8.24

Affected products

hutool/hutool-coredescription
ghsa-coords
pkg:maven/cn.hutool/hutool-core
Range: < 5.8.24

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-7m7h-rgvp-3v4rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-51075ghsaADVISORY
github.com/dromara/hutool/commit/32f2d0bd55defecb869fbf64d940bcc05642acccghsaWEB
github.com/dromara/hutool/issues/3421ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000