Vulnerabilities

TI-2026-09906 CVE-2026-11477 · GHSA-fxr3-gvm4-m8vc

hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

MEDIUM 57

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00303 Published 2026-06-08 No fix listed CWE-601

TI-2026-09899 CVE-2026-11470 · GHSA-vjmr-f5fc-vr2w

hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal

MEDIUM 57

A vulnerability has been found in hs-web hsweb-framework up to 5.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-06-08 No fix listed CWE-22

TI-2018-14616 CVE-2018-20595 · GHSA-4rm3-4mq4-mfwr

A CSRF issue was discovered in…

LOW 39

A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00644 Published 2018-12-30 No fix listed CWE-352

TI-2018-14615 CVE-2018-20594 · GHSA-qqv6-5w6p-3pgr

An issue was discovered in hsweb 3.0.4.

LOW 29

An issue was discovered in hsweb 3.0.4.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00863 Published 2018-12-30 No fix listed CWE-79

Vulnerabilities

Filters

hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

hs-web hsweb-framework File Upload FileUploadProperties.java denied path traversal

A CSRF issue was discovered in…

An issue was discovered in hsweb 3.0.4.