Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

MÉDIO 6.1CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr · Published 30/12/2018 · updated 17/06/2026

Em resumo

CVE-2018-20594 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta org.hswebframework.web:hsweb-commons, hsweb (hsweb).
Chance de exploração nos próximos 30 dias (EPSS): 0.86%, maior que 58.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
org.hswebframework.web:hsweb-commons Maven	`≤ 3.0.4`	No fix yet
hsweb hsweb	`= 3.0.4`	No fix yet

Description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

NVD description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

References

nvd.nist.gov/vuln/detail/CVE-2018-20594 · ADVISORY
hs-web/hsweb-framework · WEB
hs-web/hsweb-framework commit b72a227 · WEB
GitHub Advisory GHSA-qqv6-5w6p-3pgr · ADVISORY
hs-web/hsweb-framework · PACKAGE

Mais vulnerabilidades de org.hswebframework.web:hsweb-commons

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free