EUVD-2017-4333

Malware in sbrugna...

CVE-2017-7990

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

OpenMRS Reporting Module Cross-Site Request Forgery Vulnerability

OpenMRS is a collaborative open source project to develop software to support healthcare services in developing countries.Reporting Module is designed to provide a feature-rich and user-friendly web interface for managing reports in OpenMRS. A cross-site request forgery vulnerability exists in...

PT-2017-18052

Name of the Vulnerable Software and Affected Versions OpenMRS Reporting Module version 1.12.0 Description The issue allows for CSRF attacks with resultant XSS, where administrative authentication can be hijacked to insert JavaScript into a name field in the "webapp/reports/manageReports.jsp"...