CVE-2023-51075

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

• CWE-835
• CWE-835

• https://github.com/dromara/hutool/issues/3421Exploit, Issue Tracking, Third Party Advisory
• https://github.com/dromara/hutool/issues/3421Exploit, Issue Tracking, Third Party Advisory

Published

Dec 27, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51068An authenticated reflected cross-site scripting (XSS) vulner…5.4
• CVE-2023-51070An access control issue in QStar Archive Solutions Release R…7.5
• CVE-2023-51071An access control issue in QStar Archive Solutions Release R…6.5
• CVE-2023-51072A stored cross-site scripting (XSS) vulnerability in the NOC…5.4
• CVE-2023-51073An issue in Buffalo LS210D v.1.78-0.03 allows a remote attac…8.1
• CVE-2023-51074json-path v2.8.0 was discovered to contain a stack overflow …5.3
• CVE-2023-51079A long execution time can occur in the ParseTools.subCompile…5.3
• CVE-2023-5108The Easy Newsletter Signups WordPress plugin through 1.0.4 d…7.2
• CVE-2023-51080The NumberUtil.toBigDecimal method in hutool-core v5.8.23 wa…7.5
• CVE-2023-51084hyavijava v6.0.07.1 was discovered to contain a stack overfl…9.8
• CVE-2023-5109The WP Mailto Links – Protect Email Addresses plugin for Wor…5.4
• CVE-2023-51090Tenda M3 V1.0.0.12(4856) was discovered to contain a stack o…9.8