Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27552
HistoryOct 09, 2020 - 12:48 a.m.

Cross-site Scripting (XSS)

2020-10-0900:48:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

37.3%

hapi-fhir-testpage-overlay is vulnerable to cross-site scripting (XSS). The vulnerability exists due to the lack of sanitization of the PARAM_RESOURCE value when processing requests in several controllers.

CPENameOperatorVersion
hapi fhir testpage overlayle5.0.2

0.001 Low

EPSS

Percentile

37.3%