Vendor

Hibernate

3 known vulnerabilities.

Products

hibernate-validator 3

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2019-10219 Public exploit

The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Hibernate hibernate-validator libhibernate-validator-java org.hibernate:hibernate-validator Debian Ubuntu Maven

Nov 8, 2019