hs-web/hsweb-framework

Releases32

Frequency3 months 1 week

Last Release 7 months ago

Stars8.4K

hsweb (haʊs wɛb) 是一个基于spring-boot 2.x开发 ,首个使用全响应式编程的企业级后台管理系统基础项目。

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-20594 ↗	Dec 30, 2018Sunday, 30 December 2018, 18:29	—	4.3 MEDIUM
An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
CVE-2018-20595 ↗	Dec 30, 2018Sunday, 30 December 2018, 18:29	—	6.8 MEDIUM
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.