CVE-2014-3558 in Hibernate Validator
Сводка (Английский)
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Резервировать
14.05.2014
Раскрытие
30.09.2014
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 71691 | Hibernate Validator Java Security Manager эскалация привилегий | 264 | Не определено | Официальное исправление | CVE-2014-3558 |