Lucene search

[email protected]CVE-2023-2947

HistoryMay 27, 2023 - 11:15 p.m.

CVE-2023-2947

2023-05-2723:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve

2023

2947

cross-site scripting

xss

github

openemr

nvd

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.5%

JSON

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

CPENameOperatorVersion
open-emr:openemropen-emr openemrlt7.0.1
open-emr:openemropen-emr openemreq5.0.2.5
open-emr:openemropen-emr openemreq5.0.2.1
open-emr:openemropen-emr openemreq7.0.0.1
open-emr:openemropen-emr openemreq2.7.2
open-emr:openemropen-emr openemreq6.0.0.1
open-emr:openemropen-emr openemreq3.0.1
open-emr:openemropen-emr openemreq2.8.0
open-emr:openemropen-emr openemreq5.0.1.1
open-emr:openemropen-emr openemreq7.0.0.2

CPE	Name	Operator	Version
open-emr:openemr	open-emr openemr	lt	7.0.1
open-emr:openemr	open-emr openemr	eq	5.0.2.5
open-emr:openemr	open-emr openemr	eq	5.0.2.1
open-emr:openemr	open-emr openemr	eq	7.0.0.1
open-emr:openemr	open-emr openemr	eq	2.7.2
open-emr:openemr	open-emr openemr	eq	6.0.0.1
open-emr:openemr	open-emr openemr	eq	3.0.1
open-emr:openemr	open-emr openemr	eq	2.8.0
open-emr:openemr	open-emr openemr	eq	5.0.1.1
open-emr:openemr	open-emr openemr	eq	7.0.0.2

Rows per page:

1-10 of 551

References

github.com/openemr/openemr/commit/8d2d601ac40aca75bcd2c3cf193f59c8e56d8425

huntr.dev/bounties/52534def-acab-4200-a79a-89ef4ce6a0b0

4.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.5%

JSON

Related for CVE-2023-2947

cnvd1 osv1 prion1 cvelist1 huntr1 openvas1