Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

中危 6.1CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr · Published 30/12/2018 · updated 17/06/2026

要点

CVE-2018-20594 是影响 org.hswebframework.web:hsweb-commons, hsweb (hsweb) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.86%，高于 58.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
org.hswebframework.web:hsweb-commons Maven	`≤ 3.0.4`	No fix yet
hsweb hsweb	`= 3.0.4`	No fix yet

Description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

NVD description

An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

References

nvd.nist.gov/vuln/detail/CVE-2018-20594 · ADVISORY
hs-web/hsweb-framework · WEB
hs-web/hsweb-framework commit b72a227 · WEB
GitHub Advisory GHSA-qqv6-5w6p-3pgr · ADVISORY
hs-web/hsweb-framework · PACKAGE

org.hswebframework.web:hsweb-commons 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free