Skip to content
OpenAdvisories

Package · Maven

ca.uhn.hapi.fhir:hapi-fhir-base

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Cross-site Scripting in HAPI FHIR

    XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/Base…