ca.uhn.hapi.fhir:hapi-fhir-android (1.6), ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base (1.6) +10 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (1.6)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-android 1.6 - ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base 1.6 -...

ca.uhn.hapi.example:restful-server-example (0.7), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.7) +1 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.7)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.example:restful-server-example 0.7 - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.7 -...

org.carewebframework:org.carewebframework.fhir.client (1.2), org.carewebframework:org.carewebframework.fhir.core (1.2) +2 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (1.2)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - org.carewebframework:org.carewebframework.fhir.client 1.2 -...

org.carewebframework:org.carewebframework.cal.api.core (4.0.0), org.carewebframework:org.carewebframework.cal.api.documents (4.0.0) +34 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (1.1)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - org.carewebframework:org.carewebframework.cal.api.core 4.0.0 -...

ca.uhn.hapi.fhir.karaf:hapi-fhir (>=3.3.0, <=3.7.0), ca.uhn.hapi.fhir:hapi-fhir-android (>=3.0.0, <=3.7.0) +128 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (>=3.0.0, <=3.7.0)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version =3.0.0, =3.3.0, =3.0.0, =3.4.0, =3.0.0, =3.0.0, =3.0.0, =3.6.0, =3.0.0, =3.0.0, =3.5.0, =3.3.0, =3.0.0, =3.7.0 and more Source cves: CVE-2019-12741 Source advisory: OSV:GHSA-52MH-P2M2-W625...

ca.uhn.hapi.fhir:hapi-tinder-plugin (0.1) potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.1)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-tinder-plugin 0.1 Source cves: CVE-2019-12741 Source advisory:...

ca.uhn.hapi.fhir:hapi-tinder-plugin (0.2) potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.2)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-tinder-plugin 0.2 Source cves: CVE-2019-12741 Source advisory:...

ca.uhn.hapi.fhir:hapi-tinder-plugin (0.3) potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (0.3)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-tinder-plugin 0.3 Source cves: CVE-2019-12741 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-android (1.5), ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base (1.5) +14 more potentially affected by CVE-2019-12741 via ca.uhn.hapi.fhir:hapi-fhir-base (1.5)

ca.uhn.hapi.fhir:hapi-fhir-base MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-android 1.5 - ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base 1.5 -...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...

CVE-2019-12741

The CVE-2019-12741 issue is an XSS in the HAPI FHIR testpage overlay module of the HAPI FHIR library (pre-3.8.0). Unsanitized HTTP parameters are echoed in a form page, enabling leakage of cookies and other sensitive data from ca/uhn/fhir/to/BaseController.java via a crafted URL. Impact is limite...

CVE-2019-12741

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...