12 matches found
ANT-2026-CVX8213H · openmrs-module-fhir2 · Deserialization / XXE
deserialization high Severity Claude high · Security research firm high · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ophion Security. ANT-2026-CVX8213H: XXE injection via XML patch processing in third-party library HTTP PATCH reques...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2025-46823: Missing Authorization
openmrs-module-fhir2 provides the FHIR REST API and related services for OpenMRS, an open medical records system. In versions of the FHIR2 module prior to 2.5.0, privileges were not always correctly checked, which means that unauthorized users may have been able to add or edit data they were not...
PT-2025-23187 · Openmrs · Openmrs-Module-Fhir2
Name of the Vulnerable Software and Affected Versions: openmrs-module-fhir2 versions prior to 2.5.0 Description: The issue concerns the openmrs-module-fhir2, which provides the FHIR REST API and related services for OpenMRS, an open medical records system. In versions prior to 2.5.0, privileges...
CVE-2021-4289
CVE-2021-4289 affects OpenMRS openmrs-module-referenceapplication up to version 2.11.x. The vulnerability lies in the post function of UserAppPageController.java (parameter AppId) enabling cross-site scripting and can be exploited remotely. A fix is available in OpenMRS referenceapplication 2.12....
CVE-2021-4288
The CVE-2021-4288 issue affects OpenMRS OpenMRS module referenceapplication up to version 2.11.x, with cross-site scripting stemming from how omod/src/main/webapp/pages/userApp.gsp is handled. The vulnerability can be exploited remotely, and upgrading to version 2.12.0 addresses the issue (patch:...
CVE-2021-4289: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affected by this vulnerability is the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserAppPageController.java of the component...
CVE-2021-4288: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp. The manipulation leads to cross site scripting. The attack may be initiated...
OpenMRS 跨站脚本漏洞
OpenMRS is an open source electronic medical record system from OpenMRS, Inc. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-htmlformentryui versions prior to 2.0.0, which stems from an unknown portion of the Single-Input UI Framework Integration Module, where manipulation...
OpenMRS 跨站脚本漏洞
OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. OpenMRS openmrs-module-referenceapplication A cross-site scripting vulnerability exists in OpenMRS openmrs-module-referenceapplication versions prior to 2.12.0, which originates in the component Us...
CVE-2017-12795
CVE-2017-12795 affects OpenMRS OpenMRS module-htmlformentry 3.3.2 with an improper input validation vulnerability. Root cause and exact vulnerable component are not elaborated beyond the module name; impact is described generally as a validation error, with CVSS indicating high to critical severi...