İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 6.1

CVE-2019-10219: Hibernate Validator: siteler arası betik çalıştırma (XSS)

Yayın: · Güncelleme:

Açıklama (NVD)

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Özet bilgiler

Ürün
Redhat Hibernate Validator
CVSS v3.1
6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
%2,16 (yüzdelik 82)
CWE
CWE-79
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
redhat-hibernate-validator——6.0.18
redhat-hibernate-validator6.1.06.1.0—
redhat-hibernate-validator6.1.06.1.0—
redhat-hibernate-validator6.1.06.1.0—
redhat-hibernate-validator6.1.06.1.0—
redhat-hibernate-validator6.1.06.1.0—
redhat-hibernate-validator6.1.06.1.0—
redhat-fuse1.01.0—
redhat-jboss-data-grid———
redhat-jboss-enterprise-application-platform———
redhat-openshift-application-runtimes———
redhat-single-sign-on———
redhat-jboss-enterprise-application-platform7.27.2—
redhat-jboss-enterprise-application-platform7.37.3—
netapp-active-iq-unified-manager———
netapp-active-iq-unified-manager———
netapp-active-iq-unified-manager———
netapp-management-services-for-element-software-and-netapp-hci———
netapp-snapcenter-plug-in———
netapp-element———
oracle-access-manager11.1.2.3.011.1.2.3.0—
oracle-access-manager12.2.1.3.012.2.1.3.0—
oracle-access-manager12.2.1.4.012.2.1.4.0—
oracle-agile-engineering-data-management6.2.1.06.2.1.0—
oracle-agile-product-lifecycle-analytics3.6.13.6.1—
oracle-agile-product-lifecycle-management9.3.39.3.3—
oracle-agile-product-lifecycle-management9.3.69.3.6—
oracle-agile-product-lifecycle-management-integration-pack3.63.6—
oracle-airlines-data-model12.1.1.0.012.1.1.0.0—
oracle-airlines-data-model12.2.0.1.012.2.0.1.0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları