PT-2022-11741 · Openmrs · Openmrs Admin Ui Module
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
OpenMRS Admin UI Module versions up to 1.5.x
Description
A vulnerability was found in the OpenMRS Admin UI Module, affecting unknown code of the file
location.gsp. The manipulation leads to cross-site scripting. The attack can be initiated remotely.Recommendations
For OpenMRS Admin UI Module versions up to 1.5.x, upgrade to version 1.6.0 to address this issue. As a temporary workaround, consider restricting access to the affected file
location.gsp until the upgrade is applied.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openmrs Admin Ui Module