Security Bulletin: Hibernate Hibernate Validator could allow a remote attacker to bypass security restriction which affects watsonx.data

Summary Hibernate Hibernate Validator could allow a remote attacker to bypass security restrictions, caused by a flaw in the message interpolation processor, which may impact watsonx.data. Vulnerability Details CVEID:CVE-2020-10693 DESCRIPTION: Hibernate Hibernate Validator could allow a remote...

com.jcabi:jcabi-mysql-maven-plugin (0.8.2), com.netbout:netbout-web (>=0.22.5, <=2.32) +5 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 5.2.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-mysql-maven-plugin 0.8.2 - com.netbout:netbout-web =0.22.5, =0.94,...

com.github.mike10004:jcabi-mysql-maven-plugin (>=1.0r1, <=1.0r3), org.amebastack.container:ameba-container-grizzly (0.1.7.alpha1) +13 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.mike10004:jcabi-mysql-maven-plugin =1.0r1, =0.1.7.alpha1, =0.1.7.alpha1,...

br.com.tdsis:lambda-forest (>=0.0.1, <=1.0.1), com.baidu.unbiz:fluent-validator-jsr303 (>=1.0.0, <=1.0.9) +84 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.1.final)

org.hibernate:hibernate-validator MAVEN version 5.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.tdsis:lambda-forest =0.0.1, =1.0.0, =1.0.2, =2.0.0-beta.1, =2.0.0-beta.1,...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +67 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.3.final)

org.hibernate:hibernate-validator MAVEN version 5.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - at.porscheinformatik.zanata:common =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0,...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), au.com.mountain-pass:hyperstate (>=4, <=9) +2248 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.4.final)

org.hibernate:hibernate-validator MAVEN version 5.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - am.ik.home:uaa-server =1.0.0, =4, =1, =1, =1, =1, =1, =2.5.0, =2.0.0-snapshot, =2.0.0 -...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.1.12, <=1.2.39) +127 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.2.5.final)

org.hibernate:hibernate-validator MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.1.12, =1.2.28, =1.1.2, =1.1.2, =1.0.0,...

com.hack23.cia:service.data.impl (>=2016.9.17, <=2016.10.2), com.hack23.cia:service.impl (>=2016.9.17, <=2016.10.2) +1 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.3.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.hack23.cia:service.data.impl =2016.9.17, =2016.9.17, =2016.10.2 -...

com.hack23.cia:service.data.impl (>=2016.11.13, <=2016.11.22), com.hack23.cia:service.impl (>=2016.11.13, <=2016.11.22) +34 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.3.2.final)

org.hibernate:hibernate-validator MAVEN version 5.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.hack23.cia:service.data.impl =2016.11.13, =2016.11.13, =2.3.3, =2.3.3, =2.3.3,...

com.github.mygreen:super-csv-annotation (>=2.0, <=2.0.3), com.kumuluz.ee:kumuluzee-bean-validation-hibernate-validator (>=2.1.0-beta.2, <=2.3.0-beta.1) +53 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.3.3.final)

org.hibernate:hibernate-validator MAVEN version 5.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.mygreen:super-csv-annotation =2.0, =2.1.0-beta.2, =0.22.0, =2.3.13, =2.3.78,...

am.ik.home:uaa-server (>=1.3.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +756 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.3.4.final)

org.hibernate:hibernate-validator MAVEN version 5.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - am.ik.home:uaa-server =1.3.0, =0.2.0, =1.0.3, =1.0.6, =0.2.1, =6.2.0.5, =6.2.0.6,...

au.org.consumerdatastandards:client-cli (>=0.9.6, <=2.4.1), biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa) +1260 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.3.5.final)

org.hibernate:hibernate-validator MAVEN version 5.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - au.org.consumerdatastandards:client-cli =0.9.6, =0.0.1, =0.2.13, =1.0.1, =1.2, =0.1,...

com.hack23.cia:service.data.impl (2017.1.21), com.hack23.cia:service.impl (2017.1.21) +1 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.hack23.cia:service.data.impl 2017.1.21 - com.hack23.cia:service.impl 2017.1.21 -...

at.researchstudio.sat:won-owner-webapp (0.3), at.yawk.dropwizard-nagios:dropwizard-nagios (1.0) +655 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.1.final)

org.hibernate:hibernate-validator MAVEN version 5.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - at.researchstudio.sat:won-owner-webapp 0.3 - at.yawk.dropwizard-nagios:dropwizard-nagio...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.8.0, <=4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=4.1.0, <=4.2.0) +567 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.2.final)

org.hibernate:hibernate-validator MAVEN version 5.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.8.0, =4.1.0, =3.8.0, =3.8.0, =3.8.0, =4.0.0,...

br.com.caelum.stella:caelum-stella-hibernate-validator (>=1.0, <=1.2), br.com.caelum.stella:hibernate-persistence-example (>=1.0, <=1.2) +146 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (3.0.0.ga)

org.hibernate:hibernate-validator MAVEN version 3.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.caelum.stella:caelum-stella-hibernate-validator =1.0, =1.0, =1.0, =1.0, =1.0-beta,...

org.jasig.cas:cas-server-webapp (3.4-rc1), org.jasig.openregistry:openregistry-repository-jpa-impl (>=0.1-m3.1, <=0.1-m4) +3 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.0.1.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.jasig.cas:cas-server-webapp 3.4-rc1 -...

br.com.caelum.stella:caelum-stella-hibernate-user-types (>=2.0, <=2.1.1), br.com.caelum.stella:vraptor-validator-example (>=2.0, <=2.2.2) +467 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.1.0.final)

org.hibernate:hibernate-validator MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.caelum.stella:caelum-stella-hibernate-user-types =2.0, =2.0, =0.7.0.3, =4.1,...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta2) potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.2.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta2 Source cves:...

biz.littlej.jreqs:jreqs-beanvalidation (0.1.2), br.com.caelum:vraptor-mydvds (>=3.5.0, <=3.5.5) +317 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.2.0.final)

org.hibernate:hibernate-validator MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - biz.littlej.jreqs:jreqs-beanvalidation 0.1.2 - br.com.caelum:vraptor-mydvds =3.5.0,...