| शीर्षक | java component library hutool zip bomb vulnerability |
|---|
| विवरण | zip bomb vulnerability exists in hutool. This vulnerability occurs when zip is decompressed.
the size of the 42KB package is 5.5 GB, that of the 10MB package is 281TB, and that of the 46MB package is 4.5PB.
The HuTool component does not strictly protect against the preceding situations.
As a result, the storage resources of the server are consumed and service denial occurs.As a result, the storage resources of the server are consumed and service denial occurs.
details: https://github.com/dromara/hutool/issues/2797 |
|---|
| स्रोत | ⚠️ https://github.com/dromara/hutool/issues/2797 |
|---|
| उपयोगकर्ता | TGAO (UID 37046) |
|---|
| सबमिशन | 12/12/2022 08:18 AM (4 साल पहले) |
|---|
| संयम | 16/12/2022 06:12 PM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 215974 [Dromara HuTool तक 5.8.10 cn.hutool.core.util.ZipUtil.java सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|