Vulnerabilities

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures.

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures.

JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter.

generator-jhipster-entity-audit is a JHipster module to enable entity audit and audit log page.

JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first character that is different.

JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures.

In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts.

A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils).