Vulnerabilities in JHipster

4 results

CVE-2022-24815HIGHSQL Injection when creating an application with Reactive SQL backend EPSS 1.3%CVE-2020-4072MEDIUMLog Forging in generator-jhipster-kotlinEPSS 1.2%CVE-2025-31119HIGHCWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit FrameworkEPSS 0.5%CVE-2025-43712LOWJHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logginEPSS 0.2%