CVE-2014-3862

CVE-2014-3862 affects HL7 C-CDA 1.1 and earlier. A crafted reference element can cause the stylesheet to create an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log. The description covers the vulnerability vector and potential disclosure b...