CVE-2021-43094

2022-05-1011:40:48

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.

References

issues.openmrs.org/browse/TRUNK-6043

openmrs.org/demo/

wiki.openmrs.org/display/docs/Reporting+Bugs