-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from PatternFinder's start() method handling of empty regex matches. The patch added a check for 'start == end' to return INDEX_NOT_FOUND, explicitly preventing infinite loops when matching empty patterns. Since StrSplitter.splitByRegex relies on this finder implementation, and the tests demonstrate empty parameter handling was problematic, this function is conclusively identified as the vulnerable component.
KEV Misses 88% of Exploited CVEs- Get the report
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| cn.hutool:hutool-core | maven | <= 5.8.23 | 5.8.24 |
JavaJava