2796 matches found
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 8 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 6 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
Cross-site Scripting (XSS)
hibernate-validator is vulnerable to cross-site scripting XSS. The vulnerability exists as the SafeHtml annotation from SafeHtmlValidator does not properly sanitize payloads in HTML comments...
br.com.thiaguten:umbrella-configuration (>=0.1.0, <=1.0.0), br.com.thiaguten:umbrella-core (>=0.1.0, <=1.0.0) +871 more potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (>=6.0.0.beta2, <=6.0.17.final)
org.hibernate:hibernate-validator MAVEN version =6.0.0.beta2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.3.2-beta.6, =2.3.2-beta.5, =0.8.2-release, =0.6-release, =0.8.2-release, =0.8.0-release, =0.8.2.9-release, =0.8.4.0-release, =0.8.4.4-release and more Source cves: CVE-2019-10219 Source...
br.com.thiaguten:umbrella-configuration (>=0.1.0, <=1.0.0), br.com.thiaguten:umbrella-core (>=0.1.0, <=1.0.0) +871 more potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (>=6.0.0.beta2, <=6.0.17.final)
org.hibernate:hibernate-validator MAVEN version =6.0.0.beta2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.3.2-beta.6, =2.3.2-beta.5, =0.8.2-release, =0.6-release, =0.8.2-release, =0.8.0-release, =0.8.2.9-release, =0.8.4.0-release, =0.8.4.4-release and more Source cves: CVE-2019-10219 Source...
com.sbuslab:model (>=1.0.12, <=1.0.14) potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (6.1.0.alpha3)
org.hibernate:hibernate-validator MAVEN version 6.1.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.sbuslab:model =1.0.12, =1.0.14 Source cves: CVE-2019-10219 Source advisory:...
com.sbuslab:model (>=1.0.12, <=1.0.14) potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (6.1.0.alpha3)
org.hibernate:hibernate-validator MAVEN version 6.1.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.sbuslab:model =1.0.12, =1.0.14 Source cves: CVE-2019-10219 Source advisory:...
com.hack23.cia:service.api (>=2018.12.15, <=2019.6.23), com.hack23.cia:service.data.impl (>=2018.12.15, <=2019.6.23) +5 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.1.0.alpha1, <=6.1.0.alpha5)
org.hibernate.validator:hibernate-validator MAVEN version =6.1.0.alpha1, =2018.12.15, =2018.12.15, =2018.12.15, =0.11.0, =0.13.0, =0.11.0, =6.1.0.alpha1, =6.1.0.alpha5 Source cves: CVE-2019-10219 Source advisory: OSV:GHSA-M8P2-495H-CCMH...
com.hack23.cia:service.api (>=2018.12.15, <=2019.6.23), com.hack23.cia:service.data.impl (>=2018.12.15, <=2019.6.23) +5 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.1.0.alpha1, <=6.1.0.alpha5)
org.hibernate.validator:hibernate-validator MAVEN version =6.1.0.alpha1, =2018.12.15, =2018.12.15, =2018.12.15, =0.11.0, =0.13.0, =0.11.0, =6.1.0.alpha1, =6.1.0.alpha5 Source cves: CVE-2019-10219 Source advisory: GHSA-M8P2-495H-CCMH...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +5727 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.0.17.final)
org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2019-10219...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.21) +5727 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.0.17.final)
org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2019-10219...
GHSA-M8P2-495H-CCMH The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...
How to Fine-Tune Static Code Analysis - Part 2
RIPS performs language-specific code analysis. Each of our unique analysis engines is dedicated to a different programming language. You can get the maximum out of static analysis if you further fine-tune our language-specific engines to your specific code features. In the following, we guide you...
Unspecified Vulnerability in Json Pattern Validator
Json Pattern Validator JPV is a JSON pattern validator . A security vulnerability exists in JPV versions prior to 2.1.1. Attackers can use the vulnerability to manipulate the results of type detection with the help of a specially crafted payload...