CVE-2015-20110
Published Oct 31, 2023JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first character that is different. Attackers ca…
Vendor archive
jhipster CVEs
Beta · best-effort4 CVEs tagged to vendor jhipster — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-24815
Published Apr 11, 2022JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applica…
CVE-2020-4072
Published Jun 25, 2020In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used b…
CVE-2019-16303
Published Sep 14, 2019A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 Random…
Showing 1-4 of 4 CVEsPage 1 of 1