PT-2021-16849
CVE-2021-25919
·
تاريخ النشر
2021-03-22
·
تاريخ التحديث
2021-03-24
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenEMR versions 5.0.2 through 6.0.0
Description
The issue is related to Stored Cross-Site-Scripting (XSS) due to improper validation of user input. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
Recommendations
For OpenEMR versions 5.0.2 through 6.0.0, consider validating user input properly to prevent arbitrary code injection. As a temporary workaround, restrict access to the user creation feature to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾