> CVE-2025-35036 [HIGH]

« BACK_TO_HOME
PUBLISHED
2025-06-03 20:15
MODIFIED
2025-09-18 14:19
CVSS_SCORE V3
7.3
EPSS (Prob. Exploit)
0.78%
Top 43.8%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

> AFFECTED_PRODUCTS

Red Hat - Hibernate Validator
< 6.2.0

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Network (N)
Exploit possible à distance via réseau (HTTP, API, etc.)
AC (Complexité d'Attaque)
Attack Complexity
Low (L)
Peu de conditions requises pour exploiter
PR (Privilèges Requis)
Privileges Required
None (N)
Aucune authentification requise
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Unchanged (U)
Impact reste dans le périmètre du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
Low (L)
Divulgation limitée d'informations
I (Impact Intégrité)
Integrity Impact
Low (L)
Modification limitée des données possible
A (Impact Disponibilité)
Availability Impact
Low (L)
Interruption partielle du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité
Low
Divulgation limitée d'informations
Intégrité
Low
Modification limitée des données possible
Disponibilité
Low
Interruption partielle du service possible

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scorin...
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of I...
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of I...
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of I...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Important

> GITHUB SECURITY ADVISORY

GHSA-7v6m-28jr-rg84 MODERATE

Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

AFFECTED PACKAGES:
MAVEN / org.hibernate:hibernate-validator
>= 7.0.0.Alpha1, < 7.0.0.CR1
Fixed in: 7.0.0.CR1
MAVEN / org.hibernate:hibernate-validator
< 6.2.0.CR1
Fixed in: 6.2.0.CR1
MAVEN / org.hibernate.validator:hibernate-validator
>= 7.0.0.Alpha1, < 7.0.0.CR1
Fixed in: 7.0.0.CR1
MAVEN / org.hibernate.validator:hibernate-validator
< 6.2.0.CR1
Fixed in: 6.2.0.CR1

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

hibernate-validator insecure default Expression Language interpolation

AFFECTED PACKAGES:
Unknown / Unknown
66 versions affected
ALIASES:
GHSA-7v6m-28jr-rg84

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/06/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:04
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:13
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:13
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME