Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Hibernate\-Validator
(Hibernate)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 1 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-11-07 | CVE-2023-1932 | A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks. | Hibernate\-Validator, Codeready_studio, Jboss_enterprise_application_platform, Openstack_platform, Single_sign\-On | N/A |