medium6.1
CVE-2018-20594
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
Impact
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.hswebframework.web:hsweb-commons | <= 3.0.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hsweb | Hsweb | Version 3.0.4 |