CVE-2021-4284: OpenMRS HTML Form Entry UI Framework Integration Module cross site scripting

Published Dec 27, 2022
·
Updated

A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 811990972ea07649ae33c4b56c61c3b520895f07. It is recommended to upgrade the affected component. The identifier VDB-216873 was assigned to this vulnerability.

Affected Software

1 affected component
OpenMRS Htmlformentryui Openmrs<2.0.0

Event History

Dec 27, 2022
CVE Published
via MITRE·09:51 AM
Data Sourced
via MITRE·09:51 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2021-4284?

CVE-2021-4284 is classified as problematic due to its potential for cross-site scripting attacks.

2

How do I fix CVE-2021-4284?

To fix CVE-2021-4284, upgrade to version 2.0.0 or later of the OpenMRS HTML Form Entry UI Framework Integration Module.

3

What kind of vulnerability is CVE-2021-4284?

CVE-2021-4284 is a cross-site scripting (XSS) vulnerability that can be exploited remotely.

4

Which versions of OpenMRS are affected by CVE-2021-4284?

CVE-2021-4284 affects versions of OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x.

5

Can CVE-2021-4284 be exploited remotely?

Yes, CVE-2021-4284 can be exploited remotely by attackers to perform cross-site scripting.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203