CVE-2019-10219
MEDIUMHibernate Validator < 6.0.18 - Cross-Site Scripting via SafeHtml Validator Annotation
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2019-10219. PoCs published by dawetmaster, andikahilmy, shoucheng3.
AI-analyzed exploit summary This repository contains the source code for Hibernate Validator 6.1.0.Final, which is vulnerable to CVE-2019-10219. The code includes the annotation processor and related checks, but does not include an exploit PoC or detailed analysis of the vulnerability itself.
Description
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Exploits (4)
This repository contains the source code for Hibernate Validator 6.1.0.Final, which is vulnerable to CVE-2019-10219. The code includes the annotation processor and related checks, but does not include an exploit PoC or detailed analysis of the vulnerability itself.
This repository contains the source code for Hibernate Validator 6.1.0.Final, which is vulnerable to CVE-2019-10219. The repository includes build configurations, contributing guidelines, and the full codebase but does not contain an explicit exploit or PoC.
This repository contains the source code for Hibernate Validator 6.0.18.Final, which includes the fix for CVE-2019-10219. The repository provides documentation, contribution guidelines, and the patched code but does not include an exploit PoC or detailed vulnerability analysis.
This repository contains the source code for Hibernate Validator 6.0.17.Final, which is the reference implementation of JSR-380 - Bean Validation 2.0. The repository includes documentation, build configurations, and source files but does not contain a functional exploit or proof-of-concept code for CVE-2019-10219.
References (19)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N