CVE-2023-1932
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
A-MQ Clients 2
- Vendor
- Red Hat
- Product
- A-MQ Clients 2
- Platforms
- Unknown
- Default status
unaffected- Package
- org.apache.logging.log4j-log4j
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Cryostat 2
- Vendor
- Red Hat
- Product
- Cryostat 2
- Platforms
- Unknown
- Default status
unaffected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AMQ Broker 7
- Vendor
- Red Hat
- Product
- Red Hat AMQ Broker 7
- Platforms
- Unknown
- Default status
unaffected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat A-MQ Online
- Vendor
- Red Hat
- Product
- Red Hat A-MQ Online
- Platforms
- Unknown
- Default status
unaffected- Package
- io.enmasse-enmasse
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat BPM Suite 6
- Vendor
- Red Hat
- Product
- Red Hat BPM Suite 6
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat CodeReady Studio 12
- Vendor
- Red Hat
- Product
- Red Hat CodeReady Studio 12
- Platforms
- Unknown
- Default status
affected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Data Grid 8
- Vendor
- Red Hat
- Product
- Red Hat Data Grid 8
- Platforms
- Unknown
- Default status
unaffected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Decision Manager 7
- Vendor
- Red Hat
- Product
- Red Hat Decision Manager 7
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Fuse 7
- Vendor
- Red Hat
- Product
- Red Hat Fuse 7
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat JBoss BRMS 5
- Vendor
- Red Hat
- Product
- Red Hat JBoss BRMS 5
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Data Grid 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss Data Grid 7
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Data Virtualization 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Data Virtualization 6
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 5
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform 5
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform 6
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform 7
- Platforms
- Unknown
- Default status
affected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform Continuous Delivery
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform Continuous Delivery
- Platforms
- Unknown
- Default status
affected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Fuse 6
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse Service Works 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Fuse Service Works 6
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Operations Network 3
- Vendor
- Red Hat
- Product
- Red Hat JBoss Operations Network 3
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss SOA Platform 5
- Vendor
- Red Hat
- Product
- Red Hat JBoss SOA Platform 5
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat OpenStack Platform 10 (Newton)
- Vendor
- Red Hat
- Product
- Red Hat OpenStack Platform 10 (Newton)
- Platforms
- Unknown
- Default status
unknown- Package
- opendaylight
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenStack Platform 13 (Queens)
- Vendor
- Red Hat
- Product
- Red Hat OpenStack Platform 13 (Queens)
- Platforms
- Unknown
- Default status
affected- Package
- opendaylight
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Process Automation 7
- Vendor
- Red Hat
- Product
- Red Hat Process Automation 7
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Satellite 6
- Vendor
- Red Hat
- Product
- Red Hat Satellite 6
- Platforms
- Unknown
- Default status
affected- Package
- candlepin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Single Sign-On 7
- Vendor
- Red Hat
- Product
- Red Hat Single Sign-On 7
- Platforms
- Unknown
- Default status
affected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat support for Spring Boot
- Vendor
- Red Hat
- Product
- Red Hat support for Spring Boot
- Platforms
- Unknown
- Default status
unknown- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
streams for Apache Kafka
- Vendor
- Red Hat
- Product
- streams for Apache Kafka
- Platforms
- Unknown
- Default status
unaffected- Package
- hibernate-validator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.