4.8
Moyenne
CVE-2021-25917 In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being…
Description
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenEMR | Versions non publiées |
Références
- github.com github.com
- www.whitesourcesoftware.com www.whitesourcesoftware.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenEMR
Les 14 CVE de OpenEMR →
CVE-2021-25923
In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum…
Non notée
CVE-2021-25922
In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being…
Non notée
CVE-2021-25918
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being…
4.8
Moyenne
CVE-2021-25920
In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads…
6.5
Moyenne