CVE-2014-3558
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:hibernate_validator
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-845h-985r-jrqh | Maven | org.hibernate:hibernate-validator | >=4.1.0 <4.2.1 | 4.2.1 |
| GHSA-845h-985r-jrqh | Maven | org.hibernate:hibernate-validator | >=4.3.0 <4.3.2 | 4.3.2 |
| GHSA-845h-985r-jrqh | Maven | org.hibernate:hibernate-validator | >=5.0.0 <5.1.2 | 5.1.2 |