Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

MEDIO 6.1CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr · Published 30/12/2018 · updated 17/06/2026

En resumen

CVE-2018-20594 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.hswebframework.web:hsweb-commons, hsweb (hsweb).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.86%, mayor que el 58.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
org.hswebframework.web:hsweb-commons Maven	`≤ 3.0.4`	No fix yet
hsweb hsweb	`= 3.0.4`	No fix yet

Description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

NVD description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

References

nvd.nist.gov/vuln/detail/CVE-2018-20594 · ADVISORY
hs-web/hsweb-framework · WEB
hs-web/hsweb-framework commit b72a227 · WEB
GitHub Advisory GHSA-qqv6-5w6p-3pgr · ADVISORY
hs-web/hsweb-framework · PACKAGE

Más vulnerabilidades de org.hswebframework.web:hsweb-commons

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free