CVE-2023-23637: XSS
IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modifyonto request to the ontology builder. This may allow attackers to steal Protected Health Information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23637?
CVE-2023-23637 is considered a high severity vulnerability due to its potential for stored XSS attacks that can compromise protected health information.
How do I fix CVE-2023-23637?
To fix CVE-2023-23637, upgrade to Impatient version 1.5.2 or later, which addresses the stored XSS vulnerability.
What type of attack does CVE-2023-23637 enable?
CVE-2023-23637 enables stored cross-site scripting (XSS) attacks via malicious input in specific text fields.
Which software versions are affected by CVE-2023-23637?
CVE-2023-23637 affects Impatient versions prior to 1.5.2.
What information can be compromised due to CVE-2023-23637?
CVE-2023-23637 can potentially allow attackers to steal protected health information (PHI) from the affected application.