CVE-2019-10219 in WebLogic Server

الملخص

بحسب MITRE

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: Red Hat, Inc.
• حجز: 27/03/2019
• الاعتدال: تمت الموافقة
• إدخال: 2
• ربط: عرض
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 6.1 (NVD)
• EPSS: 0.02167
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Government, Energy, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10219
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10219
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10219/