Skip to content
OpenAdvisories

Vendor

jhipster

6 known vulnerabilities.

Products

generator-jhipster 3 generator-jhipster-entity-audit 1 JHipster 1 jhipster-kotlin 1 react-jhipster 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2020-4072

    Log Forging in generator-jhipster-kotlin

    In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/…

    jhipster jhipster-kotlin generator-jhipster-kotlin npm