CVE-2018-20594

CVE-2018-20594 affects hsweb 3.0.4, with a reflected XSS flaw caused by lack of type parameter checking in FlowableModelManagerController.java. Multiple sources (NVD entry, GHSA/OSV entries, CNVD/CNVD-like databases, and Veracode advisory) consistently describe a vulnerability where an attacker c...