CVE-2023-1932 Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Affected products: vendor: Red Hat
product: A-MQ Clients 2
cpes: cpe:/a:redhat:a_mq_clients:2
default_status: unaffected
vendor: Red Hat
product: Cryostat 2
cpes: cpe:/a:redhat:cryostat:2
default_status: unaffected
vendor: Red Hat
product: Red Hat AMQ Broker 7
cpes: cpe:/a:redhat:amq_broker:7
default_status: unaffected
vendor: Red Hat
product: Red Hat A-MQ Online
cpes: cpe:/a:redhat:amq_online:1
default_status: unaffected
vendor: Red Hat
product: Red Hat BPM Suite 6
cpes: cpe:/a:redhat:jboss_enterprise_bpms_platform:6
default_status: unknown
vendor: Red Hat
product: Red Hat CodeReady Studio 12
cpes: cpe:/a:redhat:jboss_developer_studio:12.
default_status: affected
vendor: Red Hat
product: Red Hat Data Grid 8
cpes: cpe:/a:redhat:jboss_data_grid:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Decision Manager 7
cpes: cpe:/a:redhat:jboss_enterprise_brms_platform:7
default_status: unknown
vendor: Red Hat
product: Red Hat Fuse 7
cpes: cpe:/a:redhat:jboss_fuse:7
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss BRMS 5
cpes: cpe:/a:redhat:jboss_enterprise_brms_platform:5
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Data Grid 7
cpes: cpe:/a:redhat:jboss_data_grid:7
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Data Virtualization 6
cpes: cpe:/a:redhat:jboss_data_virtualization:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 5
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:5
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 6
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform Continuous Delivery
cpes: cpe:/a:redhat:jboss_enterprise_application_platform_cd
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Fuse 6
cpes: cpe:/a:redhat:jboss_fuse:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Fuse Service Works 6
cpes: cpe:/a:redhat:jboss_fuse_service_works:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Operations Network 3
cpes: cpe:/a:redhat:jboss_operations_network:3
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss SOA Platform 5
cpes: cpe:/a:redhat:jboss_enterprise_soa_platform:5
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 10 (Newton)
cpes: cpe:/a:redhat:openstack:10
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: affected
vendor: Red Hat
product: Red Hat Process Automation 7
cpes: cpe:/a:redhat:jboss_enterprise_bpms_platform:7
default_status: unknown
vendor: Red Hat
product: Red Hat Satellite 6
cpes: cpe:/a:redhat:satellite:6
default_status: affected
vendor: Red Hat
product: Red Hat Single Sign-On 7
cpes: cpe:/a:redhat:red_hat_single_sign_on:7
default_status: affected
vendor: Red Hat
product: Red Hat support for Spring Boot
cpes: cpe:/a:redhat:openshift_application_runtimes:1.0
default_status: unknown
vendor: Red Hat
product: streams for Apache Kafka
cpes: cpe:/a:redhat:amq_streams:1
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Christian Kistner (SySS GmbH) and Moritz Bechler (SySS GmbH) for reporting this issue.
Published: 2024-11-07T10:00:51.745Z