CVE-2023-40809

2023-11-1800:00:00

mitre

github.com

opencrx

html injection

activity search

AI Score

7.2

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:opencrx:opencrx:5.2.0:*:*:*:*:*:*:*"
    ],
    "vendor": "opencrx",
    "product": "opencrx",
    "versions": [
      {
        "status": "affected",
        "version": "5.2.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]