Skip to content
OpenAdvisories

Product · hs-web

hsweb-framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-11477

    hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

    A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 …

    hs-web hsweb-framework org.hswebframework.web:hsweb-authorization-oauth2 Maven
  • Medium 6.3
    CVE-2026-11470

    hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal

    A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hswebframework/web/file/FileUploadProperties.java of the component File Upload. The …

    hs-web hsweb-framework org.hswebframework.web:hsweb-system-file Maven