All errata/sisyphus/ALT-PU-2016-3278-1
ALT-PU-2016-3278-1

Package update hibernate-validator in branch sisyphus

Version5.2.4-alt1_1jpp8
Task#175321
Published2016-12-21
Max severityMEDIUM
Severity:

Closed issues (2)

CVE-2014-3558
MEDIUM5.0

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

Published: 2014-09-30Modified: 2025-04-12
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
References
GHSA-845h-985r-jrqh
NONE

Improper Authentication in Hibernate Validator

Published: 2022-05-14Modified: 2024-04-16
References