CVE-2023-27094

Hippo4j privilege escalation issue in maven/cn.hippo4j/hippo4j-all

Identifiers

GHSA-fvx4-8h2x-gm9q, CVE-2023-27094

Package Slug

maven/cn.hippo4j/hippo4j-all

Vulnerability

Hippo4j privilege escalation issue

Description

An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management module.

Affected Versions

All versions up to 1.4.3

Solution

Unfortunately, there is no solution available yet.

Last Modified

2023-03-24

source