CVE-2019-8368: XSS
Published Sep 16, 2019
·Updated
OpenEMR v5.0.1-6 allows XSS.
Affected Software
1 affected component
open-emr Openemr=5.0.1-6
Event History
Sep 16, 2019
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-8368?
CVE-2019-8368 is considered a high severity vulnerability due to its ability to allow cross-site scripting (XSS) attacks.
2
How do I fix CVE-2019-8368?
To fix CVE-2019-8368, upgrade OpenEMR to version 5.0.1-7 or later where the vulnerability is patched.
3
What type of vulnerability is CVE-2019-8368?
CVE-2019-8368 is classified as a cross-site scripting (XSS) vulnerability.
4
What software is affected by CVE-2019-8368?
CVE-2019-8368 affects OpenEMR version 5.0.1-6.
5
Can CVE-2019-8368 lead to data theft?
Yes, CVE-2019-8368 can potentially lead to data theft through malicious scripts executed in the user's browser.