Affected packages
- cn.hutool:hutool-json— before 5.8.25
- org.json:json— before 20230227
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://nvd.nist.gov/vuln/detail/CVE-2022-45688
- https://github.com/dromara/hutool/issues/2748
- https://github.com/stleary/JSON-java/issues/708
- https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c
- https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102
- https://github.com/dromara/hutool/releases/tag/5.8.25
Structured record: https://osv.dev/vulnerability/GHSA-3vqj-43w4-2q58
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta