EUVD-2019-0194

Malware in sbrugna...

Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...

Cross-Site Scripting (XSS)

hsweb-system-workflow-local is vulnerable to cross-site scripting XSS. A lack of validation on the type parameter in FlowableModelManagerController.java allows a remote attacker to inject arbitrary Javascript into a victim's browser to steal session token or perform unwanted actions on behalf of...

Cross site scripting

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...