jhipster

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

jhipster records in CISA KEV

No jhipster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jhipster 2 records MEDIUM Generator-jhipster 1 record HIGH Generator-jhipster-kotlin 1 record LOW Jhipster Kotlin 1 record MEDIUM

Records

2 records in Jhipster · all components

TI-2019-12273 CVE-2019-16303 · GHSA-j3rh-8vwq-wh84

A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through…

MEDIUM 48

A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03673 Published 2019-09-13 Fixed in 1.2.0 CWE-338

TI-2015-08085 CVE-2015-20110 · GHSA-4gpm-r23h-gprw

JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken…

MEDIUM 40

JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first character that is different.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00732 Published 2023-10-31 Fixed in 2.23.0 CWE-307

Open these records in search →

Critical	1
High	6
Medium	1
Low	0
No CVSS	0