Security Advisory
CVE-2018-20595
8.8
HIGH
Vulnerability Description
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
Published Date
December 30, 2018
Official Source
NIST NVD Advisory