Skip to content
OpenAdvisories

Package · Maven

org.hswebframework.web:hsweb-commons

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2018-20595

    Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons

    A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.

    org.hswebframework.web:hsweb-commons Maven