Lucene search
Veracode Vulnerability DatabaseVERACODE:8097HistoryDec 31, 2018 - 2:39 a.m.
Cross-Site Scripting (XSS)
2018-12-3102:39:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.001
Percentile
32.7%
hsweb-system-workflow-local is vulnerable to cross-site scripting (XSS). A lack of validation on the type parameter in FlowableModelManagerController.java allows a remote attacker to inject arbitrary Javascript into a victim’s browser to steal session token or perform unwanted actions on behalf of the user.
Related
nvd
nvd
CVE-2018-20594
2018-12-30 18:29:00
osv
osv
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
2019-01-04 17:43:30
CVE-2018-20594
2018-12-30 18:29:00
cvelist
cvelist
CVE-2018-20594
2018-12-30 18:00:00
github
github
prion
prion
Cross site scripting
2018-12-30 18:29:00
cve
cve
CVE-2018-20594
2018-12-30 18:29:00