The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10219US | medium6.1 | Exploit | ||
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments an… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:0159WEB
- https://access.redhat.com/errata/RHSA-2020:0160WEB
- https://access.redhat.com/errata/RHSA-2020:0161WEB
- https://access.redhat.com/errata/RHSA-2020:0164WEB
- https://access.redhat.com/errata/RHSA-2020:0445WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219WEB
- https://github.com/hibernate/hibernate-validatorPACKAGE
- https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56ceeWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan