PT-2018-15458
CVE-2018-20594
·
Published
2018-12-30
·
Updated
2019-01-15
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
hsweb version 3.0.4
Description
A reflected XSS issue was discovered due to the absence of type parameter checking in
FlowableModelManagerController.java.Recommendations
For hsweb version 3.0.4, update the
FlowableModelManagerController.java to include type parameter checking to prevent XSS exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾