CVE-2023-24162 Information

Description

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

Reference

https://github.com/dromara/hutool/issues/2855 https://gitee.com/dromara/hutool/issues/I6AEX2