GHSA-gx82-jm5q-gfw2
First published: Sat Nov 18 2023(Updated: )
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.opencrx:opencrx-core-models | <=5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is GHSA-gx82-jm5q-gfw2.
What is the title of the vulnerability?
The title of the vulnerability is 'OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.'
What is the severity of the vulnerability?
There is no information available about the severity of the vulnerability GHSA-gx82-jm5q-gfw2.
What software versions are affected by the vulnerability?
OpenCRX version 5.2.0 is affected by the vulnerability.
How can the HTML injection via Product Name Field vulnerability be exploited?
The vulnerability can be exploited by injecting malicious HTML code into the Product Name field, which can lead to various security risks.
Are there any known fixes for the vulnerability?
No specific fixes or patches are mentioned for the vulnerability GHSA-gx82-jm5q-gfw2. It is recommended to update to a version that is not affected by the vulnerability, if available.
- collector/github-advisory-latest
- alias/GHSA-gx82-jm5q-gfw2
- alias/CVE-2023-40810
- package-manager/maven