CVE-2023-51075

HIGH

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of t...

Affects 1 product across 1 vendor.

CVSS 3.17.5
EPSS0.7%
Percentile50th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-835: CWE-835
◆ AI Analysis — automated analysis, not human-reviewed

CVE-2023-51075 affects hutool-core v5.8.23, introducing an infinite loop in the StrSplitter.splitByRegex function, which can be exploited to cause a Denial of Service (DoS) by manipulating the first two parameters.

BSID: BS-2023-GLOBAL-053356-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-51075?
CVE-2023-51075 affects hutool-core v5.8.23, introducing an infinite loop in the StrSplitter.splitByRegex function, which can be exploited to cause a Denial of Service (DoS) by manipulating the first two parameters.
What is the CVSS score for CVE-2023-51075?
CVE-2023-51075 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.7%.
Is CVE-2023-51075 actively exploited?
No confirmed active exploitation of CVE-2023-51075 as of 2026-05-30.
How do I remediate CVE-2023-51075?
Priority: HIGH.
What systems are affected by CVE-2023-51075?
CVE-2023-51075 affects Hutool Hutool.
Vulnerability Details
CVE IDCVE-2023-51075
BSIDBS-2023-GLOBAL-053356-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published2023-12-27
Last Modified2025-09-05
ICS Relevance0%
Weakness (CWE)
CWE-835
SourceNVD
Official Description

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Attackers can exploit this vulnerability by providing specially crafted input to the StrSplitter.splitByRegex function, leading to an infinite loop and resource exhaustion, resulting in a Denial of Service condition.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Hutool Hutool < 5.8.24
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1023 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash6c518f11d7c89ecbf4f81d55f226ffc46bad60f85fc86fb2bb7eb61b55e3aaa75553cd823bec0c3f27aaf3c1fb5a16c3f103ca5421cb59799fcfc4767eb9932a
Related CVEs affecting Hutool
CVE-2023-24163 9.8 SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to... CVE-2023-42276 9.8 hutool v5.8.21 was discovered to contain a buffer overflow via the component ... CVE-2022-22885 9.8 Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate... CVE-2023-24162 9.8 Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to ex... CVE-2023-42277 9.8 hutool v5.8.21 was discovered to contain a buffer overflow via the component ...
View all Hutool CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →