| Package | Affected versions | Patched versions |
|---|---|---|
| org.hibernate:hibernate-validator | ≥ 4.1.0, < 4.2.1≥ 4.3.0, < 4.3.2≥ 5.0.0, < 5.1.2 | 4.2.14.3.25.1.2 |
| hibernate validator | = 4.1.0= 4.2.0≥ 4.3.0, < 4.3.2≥ 5.0.0, ≤ 5.0.3≥ 5.1.0, < 5.1.2 | 4.3.25.1.2 |
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free