CVE:CVE-2020-10693
CNNVD:CNNVD-202005-159
Hibernate Validator是一款参数校验框架。
Hibernate Validator 6.1.2.Final版本中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade redhat hibernate_validator to a higher version than 6.0.20,6.1.5,7.0.0:alpha1,and avoid the version [5.0.0,6.0.20),[6.1.2,6.1.5),7.0.0:alpha1; Upgrade ibm websphere_application_server to a higher version than 20.0.0.10,and avoid the version [17.0.0.3,20.0.0.10]; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.2.0,7.3.0,and avoid the version 7.2.0,7.3.0; Upgrade redhat satellite to a higher version than 6.8,and avoid the version 6.8; Upgrade redhat satellite_capsule to a higher version than 6.8,and avoid the version 6.8; Upgrade quarkus quarkus to a higher version than 1.4.2,and avoid the version (,1.4.2]; Upgrade oracle weblogic_server to a higher version than 14.1.1.0.0,and avoid the version 14.1.1.0.0