CVE-2021-4292lowCWE-79

CVE-2021-4292: fallo de gravedad baja en OpenMRS Admin UI Module

OpenMRS Admin UI Module Manage Privilege Page privilege.gsp cross site scripting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Admin UI Module

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.5epss 1.0%
A vulnerability was found in OpenMRS Admin UI Module up to 1.4.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/metadata/privileges/privilege.gsp of the component Manage Privilege Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.5.0 is able to address this issue. The name of the patch is 4f8565425b7c74128dec9ca46dfbb9a3c1c24911. It is recommended to upgrade the affected component. The identifier VDB-216917 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
OpenMRS · Admin UI Module
CVEs relacionadas — OpenMRS Admin UI Module

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-36636LOWOpenMRS Admin UI Module Account Setup AccountPageController.java sendErrorMessage cross site scriptingEPSS 1.0%CVE-2021-4291LOWOpenMRS Admin UI Module location.gsp cross site scriptingEPSS 1.0%