GHSA-hhcf-79pm-r8r9
First published: Sat Nov 18 2023(Updated: )
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| maven/org.opencrx:opencrx-core-models | <=5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for OpenCRX version 5.2.0?
The vulnerability ID is GHSA-hhcf-79pm-r8r9.
What is the vulnerability type for OpenCRX version 5.2.0?
The vulnerability type is HTML injection.
How does the vulnerability occur in OpenCRX version 5.2.0?
The vulnerability occurs due to HTML injection via the Category Creation Name Field.
What software versions are affected by the vulnerability?
OpenCRX version 5.2.0 is affected by the vulnerability.
How can I fix the vulnerability in OpenCRX version 5.2.0?
To fix the vulnerability, it is recommended to update to a version that is not affected by the vulnerability or apply a patch provided by the vendor.
- collector/github-advisory-latest
- alias/GHSA-hhcf-79pm-r8r9
- alias/CVE-2023-40815
- package-manager/maven