| Package | Affected versions | Patched versions |
|---|---|---|
| org.hswebframework.web:hsweb-commons | ≤ 3.0.4 | |
| hsweb | = 3.0.4 |
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free