67 matches found
EUVD-2001-0200
Malware in sbrugna...
EUVD-2019-0194
Malware in sbrugna...
EUVD-2019-0176
Malware in sbrugna...
org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (7.0.5)
com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...
org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (7.0.5)
com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...
GHSA-QQV6-5W6P-3PGR Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful...
hsweb cross-site scripting vulnerability
hsweb is a set of projects for rapid construction of enterprise website backend management system, which integrates online code generation, rights management, single sign-on and dynamic multi-data source distributed transaction processing and other functions. A cross-site scripting vulnerability...
hsweb cross-site request forgery vulnerability
hsweb is a set of projects for rapid construction of enterprise website backend management system, which integrates online code generation, rights management, single sign-on and dynamic multi-data source distributed transaction processing and other functions. hsweb 3.0.4 version of the...
CVE-2018-20594
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
Cross site scripting
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
CVE-2018-20594
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
CVE-2018-20595
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful...
CVE-2018-20594
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
CVE-2018-20594
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...
CVE-2018-20594
CVE-2018-20594 affects hsweb 3.0.4, with a reflected XSS flaw caused by lack of type parameter checking in FlowableModelManagerController.java. Multiple sources (NVD entry, GHSA/OSV entries, CNVD/CNVD-like databases, and Veracode advisory) consistently describe a vulnerability where an attacker c...
CVE-2018-20595
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful...
PT-2018-15459
Name of the Vulnerable Software and Affected Versions hsweb version 3.0.4 Description A CSRF issue was discovered because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful. Recommendations For hsweb version 3.0.4,...
CVE-2018-20594: Improper Neutralization of Input During Web Page Generation
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java...