Description

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219

https://lists.apache.org/thread.html/[email protected]%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Cnotifications.accumulo.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Cnotifications.accumulo.apache.org%3E

https://access.redhat.com/errata/RHSA-2020:0164

https://access.redhat.com/errata/RHSA-2020:0160

https://access.redhat.com/errata/RHSA-2020:0161

https://access.redhat.com/errata/RHSA-2020:0159

https://access.redhat.com/errata/RHSA-2020:0445

https://lists.apache.org/thread.html/[email protected]%3Cpluto-scm.portals.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Cpluto-dev.portals.apache.org%3E

https://lists.apache.org/thread.html/[email protected]%3Cpluto-dev.portals.apache.org%3E

https://www.oracle.com/security-alerts/cpujan2022.html

https://security.netapp.com/advisory/ntap-20220210-0024/

Details

Risk Information

CVSS v2

CVSS v3