Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-4288

Опубликовано: 27 дек. 2022
Источник: nvd
CVSS3: 3.5
CVSS3: 6.1
EPSS Низкий

Описание

A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 35f81901a4cb925747a9615b8706f5079d2196a1. It is recommended to upgrade the affected component. The identifier VDB-216881 was assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openmrs:reference_application:*:*:*:*:*:*:*:*
Версия до 2.12.0 (исключая)

EPSS

Процентиль: 56%
0.00335
Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
github
около 3 лет назад

A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 35f81901a4cb925747a9615b8706f5079d2196a1. It is recommended to upgrade the affected component. The identifier VDB-216881 was assigned to this vulnerability.

EPSS

Процентиль: 56%
0.00335
Низкий

3.5 Low

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79