GHSA-5phw-6g3r-55xx
First published: Sat Nov 18 2023(Updated: )
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.opencrx:opencrx-core-models | <=5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this OpenCRX vulnerability?
The vulnerability ID of this OpenCRX vulnerability is GHSA-5phw-6g3r-55xx.
What is the title of this OpenCRX vulnerability?
The title of this OpenCRX vulnerability is 'OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.'
What is the description of this OpenCRX vulnerability?
The description of this OpenCRX vulnerability is 'OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.'
What software version is affected by this OpenCRX vulnerability?
OpenCRX version 5.2.0 is affected by this vulnerability.
What is the CWE category of this OpenCRX vulnerability?
The CWE category of this OpenCRX vulnerability is CWE-79.
Where can I find more information about this OpenCRX vulnerability?
You can find more information about this OpenCRX vulnerability at the following references: [CVE-2023-40813](https://nvd.nist.gov/vuln/detail/CVE-2023-40813), [ESecForte](https://www.esecforte.com/cve-2023-40813-html-injection-saved-search/), [GitHub Advisory](https://github.com/advisories/GHSA-5phw-6g3r-55xx).
- collector/github-advisory-latest
- alias/GHSA-5phw-6g3r-55xx
- alias/CVE-2023-40813
- collector/github-advisory
- package-manager/maven