What’s Vulnerable › Vulnerabilities

CVE-2022-22885

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-16 · updated 2026-06-17
• Weakness: CWE-295

Description

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.

Affected products

• Hutool: 5.7.18

References

• https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html
• https://github.com/dromara/hutool/issues/2042
• https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html
• https://github.com/dromara/hutool/issues/2042

Get alerted when CVE-2022-22885 or the next vulnerability affects your stack