CVE-2023-1932: Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Other sources
A vulnerability was found in hibernate-validator version 6.1.2.Final, where the method 'isValid' in the class org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator can by bypassed by omitting the tag end (less than sign). Browsers typically still render the invalid html which leads to attacks like HTML injection and Cross-Site-Scripting.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1932?
CVE-2023-1932 has been classified with a moderate severity due to the potential for HTML injection.
How do I fix CVE-2023-1932?
To fix CVE-2023-1932, update hibernate-validator to version 6.2.0.Final or later.
What causes CVE-2023-1932?
CVE-2023-1932 is caused by a flaw in the 'isValid' method of the SafeHtmlValidator class that allows for HTML injection.
Which applications are affected by CVE-2023-1932?
Applications using hibernate-validator versions up to 6.2.0.Final and specific Red Hat products such as JBoss and OpenStack are affected by CVE-2023-1932.
Is CVE-2023-1932 an external or internal vulnerability?
CVE-2023-1932 is an external vulnerability as it can be exploited through web browsers rendering HTML.