Security Advisory

CVE-2020-5728

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-17 18:29:48

Last updated 2024-08-04 08:39:25

Assigner tenable

State PUBLISHED

Description

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.

← Browse all CVEs View on cve.org ↗