Skip to content
fr Sign in
6.1 Medium

CVE-2023-1932 A flaw was found in hibernate-validator's 'isValid' method in the…

Description

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.

Affected products and versions

Product Affected versions Fixed in
A-MQ Clients 2 Versions not published
Cryostat 2 Versions not published
Red Hat AMQ Broker 7 Versions not published
Red Hat A-MQ Online Versions not published
Red Hat BPM Suite 6 Versions not published
Red Hat CodeReady Studio 12 Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Decision Manager 7 Versions not published
Red Hat Fuse 7 Versions not published
Show the 18 other branches
Product Affected versions Fixed in
Red Hat JBoss BRMS 5 Versions not published
Red Hat JBoss Data Grid 7 Versions not published
Red Hat JBoss Data Virtualization 6 Versions not published
Red Hat JBoss Enterprise Application Platform 5 Versions not published
Red Hat JBoss Enterprise Application Platform 6 Versions not published
Red Hat JBoss Enterprise Application Platform 7 Versions not published
Red Hat JBoss Enterprise Application Platform Continuous Delivery Versions not published
Red Hat JBoss Fuse 6 Versions not published
Red Hat JBoss Fuse Service Works 6 Versions not published
Red Hat JBoss Operations Network 3 Versions not published
Red Hat JBoss SOA Platform 5 Versions not published
Red Hat OpenStack Platform 10 (Newton) Versions not published
Red Hat OpenStack Platform 13 (Queens) Versions not published
Red Hat Process Automation 7 Versions not published
Red Hat Satellite 6 Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat support for Spring Boot Versions not published
streams for Apache Kafka Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of A-MQ Clients 2

The 6 CVEs of A-MQ Clients 2 →
CVE-2023-5675 Quarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. 6.5 Medium CVE-2024-1300 Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support 5.4 Medium CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx 6.5 Medium CVE-2022-4245 A flaw was found in codehaus-plexus 4.3 Medium
Track this CVE