CVE-2024-52007: Improper Restriction of XML External Entity Reference

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.8.0, <=4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=4.1.0, <=4.2.0) +567 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.4.2.final)

org.hibernate:hibernate-validator MAVEN version 5.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.8.0, =4.1.0, =3.8.0, =3.8.0, =3.8.0, =4.0.0,...

CVE-2024-51132

A flaw was found in Fast Healthcare Interoperability Resources HAPI FHIR. This vulnerability could allow attackers to execute arbitrary code or access sensitive information via a crafted request which contains malicious XML entities. Mitigation Red Hat has investigated whether a possible mitigati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.89), ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.89) +3 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.89)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.89 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.89 - ca.uhn.hapi.fhir:org.hl7.fhir.validati...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.1.21), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.1.21) +8 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.1.21)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.1.21 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +71 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (6.4.0), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (6.4.0) +47 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.881)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.881 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 6.4.0 -...

au.csiro.pathling:encoders (>=6.2.2, <=7.1.0), au.csiro.pathling:fhir-server (>=6.2.2, <=7.1.0) +206 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=6.0.0, <=6.3.32)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =6.0.0, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.2.2, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =7.4.5 and more Source cves: CVE-2024-51132 Source advisory: OSV:GHSA-4CF2-CXP3-RJR7...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.94), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.94) +6 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.94)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.94 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.94 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.62), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.62) +9 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.62)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.62 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.62 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.2.0, <=6.2.5), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=6.2.0, <=6.2.5) +119 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.68)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.68 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.2.0, =6.2.0, =6.2.0,...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.44), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.44) +6 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.44)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.44 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.44 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.75), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.75) +9 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.75)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.75 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.75 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.77), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.77) +9 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.77)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.77 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.77 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.88), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.88) +9 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.88)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.88 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.88 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.91), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.91) +9 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.91)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.91 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.91 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.12), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.12) +5 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.12)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.12 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.18), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.18) +5 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.18)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.18 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.18 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.20), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.20) +5 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.20)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.20 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.20 -...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (5.6.29), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.29) +6 more potentially affected by CVE-2024-51132 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.29)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.29 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:org.hl7.fhir.convertors 5.6.29 -...