com.nablarch.configuration:nablarch-testing-default-configuration (1.1.0), com.nablarch.framework:nablarch-backward-compatibility (1.1.0) +15 more potentially affected by CVE-2019-5919 via com.nablarch.framework:nablarch-fw-web (>=1.2.2, <=1.5.0)

com.nablarch.framework:nablarch-fw-web MAVEN version =1.2.2, =1.0.1, =1.0.1, =1.0.3, =1.0.3, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =5u6, =5u13 and more Source cves: CVE-2019-5919 Source advisory: GHSA-HMX6-GC2P-5P82...

com.nablarch.configuration:nablarch-testing-default-configuration (1.1.0), com.nablarch.framework:nablarch-backward-compatibility (1.1.0) +15 more potentially affected by CVE-2019-5919 via com.nablarch.framework:nablarch-fw-web (>=1.2.2, <=1.5.0)

com.nablarch.framework:nablarch-fw-web MAVEN version =1.2.2, =1.0.1, =1.0.1, =1.0.3, =1.0.3, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =5u6, =5u13 and more Source cves: CVE-2019-5919 Source advisory: OSV:GHSA-HMX6-GC2P-5P82...

Information Disclosure

nablarch-fw-web is vulnerable to information disclosure. Remote attackers are able to obtain information regarding stored data, register or modify invalid values due to incomplete cryptography of the data store function...