CVE-2021-43094

2022-05-1012:15:08

Google

osv.dev

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.4%

JSON

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.

CPENameOperatorVersion
openmrs-coreeq1.0
openmrs-coreeq1.3.0-RC4
openmrs-coreeqreferenceapplication-2.1.1
openmrs-coreeq1.10.0-alpha
openmrs-coreeqreferenceapplication-2.9.0
openmrs-coreeqreferenceapplication-2.1
openmrs-coreeq1.9.0-RC
openmrs-coreeqreferenceapplication-2.10.0
openmrs-coreeq1.1.0
openmrs-coreeq1.2.0

Name	Operator	Version
openmrs-core	eq	1.0
openmrs-core	eq	1.3.0-RC4
openmrs-core	eq	referenceapplication-2.1.1
openmrs-core	eq	1.10.0-alpha
openmrs-core	eq	referenceapplication-2.9.0
openmrs-core	eq	referenceapplication-2.1
openmrs-core	eq	1.9.0-RC
openmrs-core	eq	referenceapplication-2.10.0
openmrs-core	eq	1.1.0
openmrs-core	eq	1.2.0