CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Score
6.1 medium
Published
2019-11-08
Links
NVD · cve.org

Affected ports (6)

PortPackageVersionStatusMaintainer
emulators/virtualbox-ose-additions-legacyvirtualbox-ose-additions-legacy5.2.44.1501000_11unaddressedvbox@FreeBSD.org
emulators/virtualbox-ose-additions-legacyvirtualbox-ose-additions-nox11-legacy5.2.44.1501000_11unaddressedvbox@FreeBSD.org
emulators/virtualbox-ose-additions-legacyvirtualbox-ose-additions-xlibre-legacy5.2.44.1501000_11unaddressedvbox@FreeBSD.org
emulators/virtualbox-ose-kmod-legacyvirtualbox-ose-kmod-legacy5.2.44.1501000_7unaddressedvbox@FreeBSD.org
emulators/virtualbox-ose-legacyvirtualbox-ose-legacy5.2.44_36unaddressedvbox@FreeBSD.org
emulators/virtualbox-ose-legacyvirtualbox-ose-nox11-legacy5.2.44_36unaddressedvbox@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>virtualbox-ose-additions-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
      <package>
	<name>virtualbox-ose-additions-nox11-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
      <package>
	<name>virtualbox-ose-additions-xlibre-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
      <package>
	<name>virtualbox-ose-kmod-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
      <package>
	<name>virtualbox-ose-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
      <package>
	<name>virtualbox-ose-nox11-legacy</name>
	<range><lt>5.7.36</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability was found in Hibernate-Validator. The SafeHtml
	validator annotation fails to properly sanitize payloads consisting of
	potentially malicious code in HTML comments and instructions. This
	vulnerability can result in an XSS attack.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2019-10219</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2019-10219</url>
    </references>
    <dates>
      <discovery>2019-11-08</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>