{"action":"Upgrade org.hibernate:hibernate-validator to 4.2.1 (4.2.x), 4.3.2 (4.3.x) or 5.1.2 (5.1.x) or later.","affected":[{"fixed":"4.2.1","introduced":"4.1.0"},{"fixed":"4.3.2","introduced":"4.3.0"},{"fixed":"5.1.2","introduced":"5.0.0"}],"component":"org.hibernate:hibernate-validator","cve_ids":["CVE-2014-3558"],"ecosystem":"Maven","epss":0.02913,"exploited":false,"fixed_versions":["4.2.1","4.3.2","5.1.2"],"ghsa_id":"GHSA-845h-985r-jrqh","id":"tcs_01M5N8KPVVTY1YA4328RRH17X6","modified_at":"2024-12-08T05:25:23.348447Z","published_at":"2022-05-14T01:18:38Z","references":["https://osv.dev/vulnerability/GHSA-845h-985r-jrqh","https://nvd.nist.gov/vuln/detail/CVE-2014-3558","https://github.com/hibernate/hibernate-validator/commit/2c95d4ea0ef20977be249e31a4a4f4f4f71c945d","https://github.com/hibernate/hibernate-validator/commit/67fdff14831c035c25e098fe14bd86523d17f726","https://github.com/hibernate/hibernate-validator/commit/7e7131939a4361a7cad3e77ab89a8462132c561c","https://github.com/hibernate/hibernate-validator/commit/c489416f699a46859c134796b3ccfea41ef3ce52","https://github.com/hibernate/hibernate-validator/commit/c9525ca544b1281e2b7c7347e86e87c86dc1dc6e","https://github.com/hibernate/hibernate-validator/commit/e8c42b689df8c6752d635d02c6518da3fece3870","https://github.com/hibernate/hibernate-validator/commit/f97c2021a03c825abdeca1692f5be51e77e76a8f","https://github.com/hibernate/hibernate-validator/commit/fd4eaed7fb930db6a5e4c03742b4b3adcfecc90e","https://github.com/hibernate/hibernate-validator","https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml","https://hibernate.atlassian.net/browse/HV-912","http://rhn.redhat.com/errata/RHSA-2014-1285.html","http://rhn.redhat.com/errata/RHSA-2014-1286.html","http://rhn.redhat.com/errata/RHSA-2014-1287.html","http://rhn.redhat.com/errata/RHSA-2014-1288.html","http://rhn.redhat.com/errata/RHSA-2015-0125.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-845h-985r-jrqh","url":"https://osv.dev/vulnerability/GHSA-845h-985r-jrqh"}],"summary":"Improper Authentication in Hibernate Validator"}