Skip to content
OpenAdvisories
High WID-SEC-2026-3842 2 CVEs

JHipster: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 8, 2026 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in JHipster ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder eine SQL-Injection durchzuführen.

Product

JHipster ist eine Java-Entwicklungsplattform zur Generierung, Entwicklung und Bereitstellung von Webanwendungen und Mikroservice-Architekturen.

Vulnerabilities 2

  • High 8.8
    CVE-2026-107375

    JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

    JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the att…

    jhipster generator-jhipster generator-jhipster npm
  • High 7.6
    CVE-2026-107303

    JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

    JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data an…

    jhipster generator-jhipster react-jhipster generator-jhipster npm

Revision history

  1. #1

    Initiale Fassung

References