Lucene search
Veracode Vulnerability DatabaseVERACODE:8097HistoryDec 31, 2018 - 2:39 a.m.
Cross-Site Scripting (XSS)
2018-12-3102:39:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
32.9%
hsweb-system-workflow-local is vulnerable to cross-site scripting (XSS). A lack of validation on the type parameter in FlowableModelManagerController.java allows a remote attacker to inject arbitrary Javascript into a victim’s browser to steal session token or perform unwanted actions on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hsweb-system-workflow-local | le | 3.0.4 |
Related
cvelist
cvelist
CVE-2018-20594
2018-12-30 18:00:00
osv
osv
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
2019-01-04 17:43:30
CVE-2018-20594
2018-12-30 18:29:00
prion
prion
Cross site scripting
2018-12-30 18:29:00
github
github
nvd
nvd
CVE-2018-20594
2018-12-30 18:29:00
cve
cve
CVE-2018-20594
2018-12-30 18:29:00