NetSight
IP …
medium6.1

CVE-2019-10219

A vulnerability was found in Hibernate-Validator.

Impact

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Affected products

VendorProductAffected versions
RedhatHibernate Validator
before 6.0.18
Version 6.1.0
RedhatFuse
Version 1.0
RedhatJboss Data Grid
All versions
RedhatJboss Enterprise Application Platform
All versions
Versions 7.2, 7.3
RedhatOpenshift Application Runtimes
All versions
RedhatSingle Sign-On
All versions
NetappActive Iq Unified Manager
All versions
NetappManagement Services For Element Software And Netapp Hci
All versions
NetappSnapcenter Plug-In
All versions
NetappElement
All versions
OracleAccess Manager
Versions 11.1.2.3.0, 12.2.1.3.0, 12.2.1.4.0
OracleAgile Engineering Data Management
Version 6.2.1.0

Weakness classification

CWE-79

References