CVE-2021-4291: OpenMRS Admin UI Module location.gsp cross site scripting
A vulnerability was found in OpenMRS Admin UI Module up to 1.5.x. It has been declared as problematic. This vulnerability affects unknown code of the file omod/src/main/webapp/pages/metadata/locations/location.gsp. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is a7eefb5f69f6c50a3bffcb138bb8ea57cb41a9b6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216916.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-4291?
CVE-2021-4291 has been classified as a problematic vulnerability affecting the OpenMRS Admin UI Module.
How do I fix CVE-2021-4291?
To fix CVE-2021-4291, you should upgrade the OpenMRS Admin UI Module to version 1.6.0 or later.
What type of vulnerability is CVE-2021-4291?
CVE-2021-4291 is a cross-site scripting (XSS) vulnerability found in the OpenMRS Admin UI Module.
Which versions are affected by CVE-2021-4291?
CVE-2021-4291 affects all versions of the OpenMRS Admin UI Module up to and including 1.5.x.
What component is vulnerable in CVE-2021-4291?
The vulnerable component in CVE-2021-4291 is the file omod/src/main/webapp/pages/metadata/locations/location.gsp in the OpenMRS Admin UI Module.