Skip to content
OpenAdvisories

Vendor

fbeta-GmbH

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.8

    ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests

    ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration does not neutralize CRLF characters in values used by app/vau/VAUProtokoll.py to const…