Skip to content
OpenAdvisories

Archive

14 May 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Feed

  • High 7.2

    URL Restriction Bypass in plantuml/plantuml

    URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery (SSRF). This allows accessing r…

  • High 8.3

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in OpenClinica

    OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Versions prior to 3.16.1 are vulnerable to SQL injection due to the use of string concatenation to create SQL queries instead of prepared statements. …