ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.hibernate:hibernate-validator(Maven) | 4.1.0 | 4.2.1 | N/A |
| org.hibernate:hibernate-validator(Maven) | 4.3.0 | 4.3.2 | N/A |
| org.hibernate:hibernate-validator(Maven) | 5.0.0 | 5.1.2 | N/A |
CVSS Metrics
