Hibernate vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hibernate products: 1 record(s), with severity, exploitation and fixes.

Hibernate-validator 1

Exploited only (KEV) →

CVE-2019-10219 Medium · 6.1 CWE-79 Nov 8, 2019

Cross-site Scripting (XSS) in Red Hat Hibernate Validator

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.