Package · Maven

org.opencrx:opencrx-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.4

CVE-2023-27150

OpenCRX Cross-site Scripting vulnerability

openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.

org.opencrx:opencrx-core Maven

Dec 26, 2023
Medium 6.1

CVE-2021-25959

OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

org.opencrx opencrx-core-config org.opencrx:opencrx-core-models org.opencrx:opencrx-client Maven

Sep 29, 2021