EUVD-2021-34131

Malicious code in bioql PyPI...

CVE-2021-4295

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

Xxe

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295 ONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity reference

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295

ONC code-validator-api (versions up to 1.0.30) contains an XML External Entity (XXE) issue in vocabularyValidationConfigurations of CodeValidatorApiConfiguration.java. The vulnerability allows external entity reference manipulation and is addressed by upgrading to version 1.0.31. The linked patch...

PT-2022-11751 · Unknown · Onc Code-Validator-Api

Name of the Vulnerable Software and Affected Versions: ONC code-validator-api versions up to 1.0.30 Description: A vulnerability was found in the ONC code-validator-api, affecting the vocabularyValidationConfigurations function of the XML Handler component. The issue leads to an xml external enti...

code-validator-api 代码问题漏洞

code-validator-api is an open source library of source code for vocabulary validator APIs and services from the Office of the National Coordinator for Health IT. A code-validator-api vulnerability exists in versions prior to 1.0.30. An attacker exploited this vulnerability to cause xml external...