Read the docs

hs-web

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

hs-web records in CISA KEV

No hs-web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hsweb 2 records LOW

Records

2 records in Hsweb · all components

TI-2018-14616 CVE-2018-20595 · GHSA-4rm3-4mq4-mfwr

A CSRF issue was discovered in…

Priority LOW 39

A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00644 Published 2018-12-30 No fix listed CWE-352
TI-2018-14615 CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr

An issue was discovered in hsweb 3.0.4.

Priority LOW 29

An issue was discovered in hsweb 3.0.4.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00863 Published 2018-12-30 No fix listed CWE-79
Open these records in search →