NexaPulse
Subscribe
6.1mediumMedium

CVE-2019-10219

Redhat Hibernate Validator

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, someone has to be persuaded to take an action first.

Scoring

CVSS
6.1 (v3.1)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Assigned by
secalert@redhat.com

Dates

Published
2019-11-08
Last modified
2026-08-25
Sources
NVD

Affected products

  • Redhat Hibernate Validator- 6.0.18, 6.1.0
  • Redhat Fuse1.0
  • Redhat Jboss Data Gridall versions
  • Redhat Jboss Enterprise Application Platformall versions, 7.2, 7.3
  • Redhat Openshift Application Runtimesall versions
  • Redhat Single Sign-Onall versions
  • Redhat Enterprise Linux6.0
  • Netapp Active Iq Unified Managerall versions
  • Netapp Management Services For Element Software And Netapp Hciall versions
  • Netapp Snapcenter Plug-Inall versions
  • Netapp Elementall versions
  • Oracle Access Manager11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0

As listed in the NVD configuration data. Not a statement about your estate.

References