Package · Maven

ca.uhn.hapi.fhir:org.hl7.fhir.validation

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2024-51132 Public exploit

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

ca.uhn.hapi.fhir:org.hl7.fhir.r5 ca.uhn.hapi.fhir:org.hl7.fhir.validation ca.uhn.hapi.fhir:org.hl7.fhir.r4b ca.uhn.hapi.fhir:org.hl7.fhir.utilities Maven

Nov 5, 2024
High 7.5

CVE-2023-28465 Public exploit

HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057

The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by t…

ca.uhn.hapi.fhir:org.hl7.fhir.validation ca.uhn.hapi.fhir:org.hl7.fhir.r5 ca.uhn.hapi.fhir:org.hl7.fhir.utilities ca.uhn.hapi.fhir:org.hl7.fhir.r4b Maven

Dec 12, 2023