The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10219US | medium6.1 | Exploit | ||
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments an… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2020:0159WEB
- https://access.redhat.com/errata/RHSA-2020:0160WEB
- https://access.redhat.com/errata/RHSA-2020:0161WEB
- https://access.redhat.com/errata/RHSA-2020:0164WEB
- https://access.redhat.com/errata/RHSA-2020:0445WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219WEB
- https://github.com/hibernate/hibernate-validatorPACKAGE
- https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56ceeWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan