CVE-2020-36635: OpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting
A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/openmrs/module/appointmentscheduling/validator/AppointmentTypeValidator.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.13.0 is able to address this issue. The name of the patch is 34213c3f6ea22df427573076fb62744694f601d8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216915.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36635?
CVE-2020-36635 is classified as problematic and can affect the functionality of the OpenMRS Appointment Scheduling Module.
How do I fix CVE-2020-36635?
To fix CVE-2020-36635, upgrade the OpenMRS Appointment Scheduling Module to version 1.13.0 or later.
Which versions are affected by CVE-2020-36635?
CVE-2020-36635 affects OpenMRS Appointment Scheduling Module versions up to and including 1.12.x.
What function in the OpenMRS Appointment Scheduling Module is impacted by CVE-2020-36635?
CVE-2020-36635 impacts the validateFieldName function within the AppointmentTypeValidator class.
Is there a known exploit for CVE-2020-36635?
There is currently no public knowledge of an exploit specifically targeting CVE-2020-36635.