Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

MEDIO 6.1CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr · Published 30/12/2018 · updated 17/06/2026

In breve

CVE-2018-20594 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda org.hswebframework.web:hsweb-commons, hsweb (hsweb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.86%, superiore al 58.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
org.hswebframework.web:hsweb-commons Maven	`≤ 3.0.4`	No fix yet
hsweb hsweb	`= 3.0.4`	No fix yet

Description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

NVD description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

References

nvd.nist.gov/vuln/detail/CVE-2018-20594 · ADVISORY
hs-web/hsweb-framework · WEB
hs-web/hsweb-framework commit b72a227 · WEB
GitHub Advisory GHSA-qqv6-5w6p-3pgr · ADVISORY
hs-web/hsweb-framework · PACKAGE

Altre vulnerabilità di org.hswebframework.web:hsweb-commons

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free