jhipster

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

jhipster records in CISA KEV

No jhipster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jhipster 2 records MEDIUM Generator-jhipster 1 record HIGH Generator-jhipster-kotlin 1 record LOW Jhipster Kotlin 1 record MEDIUM

Records

1 record in Jhipster Kotlin · all components

TI-2019-12273 CVE-2019-16303 · GHSA-j3rh-8vwq-wh84

A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through…

MEDIUM 48

A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03673 Published 2019-09-13 Fixed in 1.2.0 CWE-338

Open these records in search →

Critical	1
High	6
Medium	1
Low	0
No CVSS	0