Beveiligingsadvies

CVE-2020-5728

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-17 18:29:48
Laatst bijgewerkt 2024-08-04 08:39:25
Toegewezen door tenable
CVSS-score geen score
Status PUBLISHED

Beschrijving

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.