Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hsweb Subscribe
Filtered by product Hsweb
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-20594 1 Hsweb 1 Hsweb 2019-01-15 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
CVE-2018-20595 1 Hsweb 1 Hsweb 2019-01-14 6.8 MEDIUM 8.8 HIGH
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.