460 matches found
Input validation
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
CVE-2023-40814
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
CVE-2023-40812
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
PT-2023-27648 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Product Name Field. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue. At the moment, there is no information about a newer...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40815
Summary: OpenCRX 5.2.0 is affected by an HTML injection flaw in the Category Creation Name Field. This issue is repeatedly described as enabling Cross‑Site Scripting (XSS) via the category name input, reflecting a lack of input validation in that field. The available documents identify the vulner...
PT-2023-27653 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Activity Milestone Name Field, which could potentially lead to malicious code execution. Recommendations: For OpenCRX version 5.2.0, update to a newer version that...
CVE-2023-40810
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field...
CVE-2023-40812
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field...
CVE-2023-40814
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field...
CVE-2023-40813
OpenCRX 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation due to insufficient input sanitization in the related component. Several sources (Veracode, GHSA, OSV, CNNVD, NVD) indicate this is an XSS-style issue with a CVSSv3.1 base score of 6.1 (Medium) and user interaction r...
CVE-2023-40809
OpenCRX 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number. Root cause is improper input sanitization/validation in that field, enabling potential JavaScript injection as described by Veracode sources. CVSSv3.1 shows a base score of 6.1 (MEDIUM) with NETWORK at...
CVE-2023-40817
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field...
PT-2023-27649 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Accounts Group Name Field. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, or as a temporary workaround, consider validating...
CVE-2023-40817
OpenCRX 5.2.0 is vulnerable to HTML injection through the Product Configuration Name Field. The Red Hat, Veracode, and CVE ecosystem entries corroborate that the issue stems from insufficient input sanitization in the Product Configuration Name Field, enabling injection of HTML. Practical impact ...
PT-2023-27650 · Opencrx · Opencrx
Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via Activity Saved Search Creation. Recommendations: For OpenCRX version 5.2.0, update to a version that fixes this issue, as no specific workaround is provided for this...