VULNERABILITY INTELLIGENCE

CVE-2023-51075

CVSS score7.5 HIGH

EPSS probability0.65%

CISA KEVNot currently listed

Published2023-12-27

Last modified2026-06-17

Description

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.