Relative Path Traversal

Relative Path Traversal in ca.uhn.hapi.fhir:org.hl7.fhir.r4b...

Man-in-the-Middle (MitM)

org.hl7.fhir.r4b is vulnerable to Man-in-the-Middle MitM attacks. The vulnerability exists due to the download of binary resources via HTTP in the initialize function of TerminologyCacheManager.java, allowing an attacker to control the Zip file's contents if the attacker is on the network or...