What is GHSA-rhg5-fqr3-hrf5?

GHSA-rhg5-fqr3-hrf5 is a security advisory published by GitHub Security Advisories with Medium severity. Injection in DeltaSpike

Which CVE IDs does GHSA-rhg5-fqr3-hrf5 cover?

GHSA-rhg5-fqr3-hrf5 covers the following CVE IDs: CVE-2019-12416. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rhg5-fqr3-hrf5?

GHSA-rhg5-fqr3-hrf5 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-rhg5-fqr3-hrf5?

GHSA-rhg5-fqr3-hrf5 affects 1 product, including: maven/org.apache.deltaspike:deltaspike:\u003c= 1.9.3.

GHSA-rhg5-fqr3-hrf5MediumCVSS 6.1

Injection in DeltaSpike

Vendor

GitHub Security Advisories

Published

February 10, 2022

Last Modified

January 20, 2023

🔗 CVE IDs covered (1)

CVE-2019-12416 →

📋 Description

we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.

🎯 Affected products1

maven/org.apache.deltaspike:deltaspike:<= 1.9.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-12416
https://lists.apache.org/thread.html/r848d7d4c0bf637da55f01103eb8ba0fce344c295fda53264cbaa1568@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r8f327712b2b07f867fde1e77cbafcf8cc6a3facaa693ffdd2c3285e3%40%3Cdev.deltaspike.apache.org%3E
https://github.com/advisories/GHSA-rhg5-fqr3-hrf5