Package · Maven

org.opencrx:opencrx-core-models

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

Medium 6.1

CVE-2023-40809

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40815

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40812

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40816

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40813

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40817

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40814

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2023-40810

Cross-site Scripting in OpenCRX

OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.

org.opencrx:opencrx-core-models Maven

Nov 18, 2023
Medium 6.1

CVE-2021-25959

OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

org.opencrx opencrx-core-config org.opencrx:opencrx-core-models org.opencrx:opencrx-client Maven

Sep 29, 2021