4 matches found
CVE-2020-5729
In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is susceptible to this issue...
CVE-2020-5729
In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is susceptible to this issue...
CVE-2020-5729
OpenMRS CVE-2020-5729 affects OpenMRS 2.9 and earlier. The UI Framework Error Page reflects arbitrary user-supplied input back to the browser, enabling cross-site scripting (XSS) on any page that triggers a UI Framework error. The Connected documents confirm this vulnerability pattern across mult...
PT-2020-18652
Name of the Vulnerable Software and Affected Versions OpenMRS versions 2.9 and prior Description The issue allows arbitrary, user-supplied input to be reflected back to the browser, resulting in a potential XSS issue. Any page that can trigger a UI Framework Error is susceptible to this problem...