UpHeron
All vulnerabilities

Servers and applications

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Severity
Medium 6.1
Published
8 Nov 2019
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
5.7.36, 8.0.27
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 11.0.13
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version before 5.7.36
  • Version 5.7.36
  • From 8.0.0 before 8.0.27

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-10219
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-10219