Medium · 5.4 CVE-2023-27150 EUVD-2023-3166GHSA-8wjx-p2f8-5rjp

OpenCRX Cross-site Scripting vulnerability

Published Dec 26, 2023 · Updated Aug 27, 2024 · Assigned by mitre

Description

openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.opencrx:opencrx-core	<= 5.2.0	—	GHSA-8wjx-p2f8-5rjp