ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.4), ca.uhn.hapi.fhir:hapi-tinder-plugin (0.4) potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.4)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.4 - ca.uhn.hapi.fhir:hapi-tinder-plugin 0.4 Source...

ca.uhn.hapi.fhir:hapi-fhir-structures-dev (0.8), ca.uhn.hapi.fhir:hapi-fhir-structures-dstu (0.8) +2 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.8)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-structures-dev 0.8 - ca.uhn.hapi.fhir:hapi-fhir-structures-dstu 0.8 -...

Cross-site Scripting in HAPI FHIR

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

ca.uhn.hapi.fhir:hapi-fhir-android (2.5), ca.uhn.hapi.fhir:hapi-fhir-client-okhttp (2.5) +67 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (2.5)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-android 2.5 - ca.uhn.hapi.fhir:hapi-fhir-client-okhttp 2.5 -...

ca.uhn.hapi.fhir:hapi-fhir-android (1.5), ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base (1.5) +14 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (1.5)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-android 1.5 - ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base 1.5 -...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

Cross-site Scripting (XSS)

HAPI FHIR TestPage Overlay is vulnerable to cross-site scripting XSS. The parameters passed through the HTTP request to be displayed in a form page are not sanitized, allowing an attacker to inject a malicious script...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

Cross site scripting

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741

The CVE-2019-12741 issue is an XSS in the HAPI FHIR testpage overlay module of the HAPI FHIR library (pre-3.8.0). Unsanitized HTTP parameters are echoed in a form page, enabling leakage of cookies and other sensitive data from ca/uhn/fhir/to/BaseController.java via a crafted URL. Impact is limite...

ca.uhn.hapi.example:restful-server-example (0.7), ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0) +230 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (>=0.1, <=3.7.0)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version =0.1, =3.3.0, =1.3, =3.4.0, =3.0.0, =2.0, =2.3, =3.6.0, =1.4, =0.9, =3.5.0, =3.3.0, =3.7.0 and more Source cves: CVE-2019-12741 Source advisory: MEND:CVE-2019-12741...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741: Improper Neutralization of Input During Web Page Generation

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

PT-2019-12911

Name of the Vulnerable Software and Affected Versions HAPI FHIR library versions prior to 3.8.0 Description The issue involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information via a specially crafted URL, specifically...

Cross-site Scripting

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafted URL. This...

bd.ac.seu.erp:model (0.0.2), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.6.0) +582 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=2.0.0.release, <=2.0.14.release)

org.springframework.data:spring-data-jpa MAVEN version =2.0.0.release, =3.5.0, =3.5.0, =3.5.0, =0.9.1-rc1, =3.0.0.release, =3.0.1.release - cn.bjdd301:core-mvc 1.0.0 - cn.com.zhaoweiping:alpha-framework 2.0.0.release - cn.jbone:jbone-common 1.0.0 - cn.jbone:jbone-errors 1.0.0 -...