6.1
Medium
CVE-2023-1932 A flaw was found in hibernate-validator's 'isValid' method in the…
Description
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| A-MQ Clients 2 | Versions not published | |
| Cryostat 2 | Versions not published | |
| Red Hat AMQ Broker 7 | Versions not published | |
| Red Hat A-MQ Online | Versions not published | |
| Red Hat BPM Suite 6 | Versions not published | |
| Red Hat CodeReady Studio 12 | Versions not published | |
| Red Hat Data Grid 8 | Versions not published | |
| Red Hat Decision Manager 7 | Versions not published | |
| Red Hat Fuse 7 | Versions not published |
Show the 18 other branches Hide the 18 other branches
Other CVEs of A-MQ Clients 2
The 6 CVEs of A-MQ Clients 2 →
CVE-2023-5675
Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.
6.5
Medium
CVE-2024-1300
Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support
5.4
Medium
CVE-2024-1023
Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx
6.5
Medium
CVE-2022-4245
A flaw was found in codehaus-plexus
4.3
Medium