Description
IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder. This may allow attackers to steal Protected Health Information.
High · 7.6
CVE-2023-23637
EUVD-2023-27725GHSA-fqgh-j4x2-5297
IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder…
Published Jan 17, 2023 · Updated Apr 4, 2025 · Assigned by mitre