CVE-2019-10219
hibernate-validator: safeHTML validator allows XSS
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVSS 3.1 · 6.1 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products