PT-2020-12288 · Red Hat+1 · Hibernate Validator+1

Published 2020-05-06 · Updated 2022-05-10 · CVE-2020-10693

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hibernate Validator version 6.1.2.Final

Description A flaw was found in the message interpolation processor of Hibernate Validator, enabling invalid EL expressions to be evaluated as if they were valid. This allows attackers to bypass input sanitation controls that developers may have put in place when handling user-controlled data in error messages.

Recommendations For Hibernate Validator version 6.1.2.Final, consider disabling the message interpolation processor until a patch is available to prevent the evaluation of invalid EL expressions. Restrict the handling of user-controlled data in error messages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-10693

GHSA-RMRM-75HP-PHR2

OESA-2021-1138

RHSA-2020:3461

RHSA-2020:3462

RHSA-2020:3463

RHSA-2020:3637

RHSA-2020:3638

RHSA-2020:3639

RHSA-2020:4366

Affected Products

Debian

Hibernate Validator

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2020-10693 · Security Note
• https://osv.dev/vulnerability/OESA-2021-1138 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10693 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rmrm-75hp-phr2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-10693 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-10693 · Security Note
• https://oracle.com/security-alerts/cpuapr2022.html · Patch
• https://security-tracker.debian.org/tracker/CVE-2020-10693 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-10693 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10693 · Vendor Advisory
• https://t.me/cvenotify/3575 · Telegram Post
• https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c%40%3Cpluto-dev.portals.apache.org%3E · Note
• https://t.me/cvenotify/10657 · Telegram Post
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1138 · Note
• https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a%40%3Cpluto-dev.portals.apache.org%3E · Note