Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-25959

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rwh9-8xx8-4wfm

Cross-site Scripting in OpenCRX In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

gitlab/maven/org.opencrx/opencrx-client/CVE-2021-25959

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

gitlab/maven/org.opencrx/opencrx-core-config/CVE-2021-25959

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

gitlab/maven/org.opencrx/opencrx-core/CVE-2021-25959

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

gitlab/maven/org.opencrx/opencrx-core-models/CVE-2021-25959

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

gitlab/maven/org.opencrx/opencrx-gradle/CVE-2021-25959

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.