REDHAT-BUG-2323897: HAPI FHIR HAPI FHIR vulnerability

Q: What is the severity of REDHAT-BUG-2323897?

The severity of REDHAT-BUG-2323897 is rated at 76, indicating a high level of risk.

Q: How do I fix REDHAT-BUG-2323897?

To fix REDHAT-BUG-2323897, upgrade to HAPI FHIR version 6.4.0 or later.

Q: What does the REDHAT-BUG-2323897 vulnerability involve?

REDHAT-BUG-2323897 involves an XML External Entity (XXE) vulnerability that can lead to unauthorized access to sensitive information.

Q: Is REDHAT-BUG-2323897 applicable to all versions of HAPI FHIR?

REDHAT-BUG-2323897 affects all versions of HAPI FHIR before v6.4.0.

Q: What types of attacks can REDHAT-BUG-2323897 facilitate?

REDHAT-BUG-2323897 can facilitate attacks that access sensitive information or execute arbitrary code through crafted XML requests.

Published Nov 5, 2024

Updated

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

Affected Software

1 affected component

HAPI FHIR HAPI FHIR<6.4.0

Event History

Nov 5, 2024

Data Sourced

via Red Hat·05:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2323897?

The severity of REDHAT-BUG-2323897 is rated at 76, indicating a high level of risk.

How do I fix REDHAT-BUG-2323897?

To fix REDHAT-BUG-2323897, upgrade to HAPI FHIR version 6.4.0 or later.

What does the REDHAT-BUG-2323897 vulnerability involve?

REDHAT-BUG-2323897 involves an XML External Entity (XXE) vulnerability that can lead to unauthorized access to sensitive information.

Is REDHAT-BUG-2323897 applicable to all versions of HAPI FHIR?

REDHAT-BUG-2323897 affects all versions of HAPI FHIR before v6.4.0.

What types of attacks can REDHAT-BUG-2323897 facilitate?

REDHAT-BUG-2323897 can facilitate attacks that access sensitive information or execute arbitrary code through crafted XML requests.

REDHAT-BUG-2323897: HAPI FHIR HAPI FHIR vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of REDHAT-BUG-2323897?

How do I fix REDHAT-BUG-2323897?

What does the REDHAT-BUG-2323897 vulnerability involve?

Is REDHAT-BUG-2323897 applicable to all versions of HAPI FHIR?

What types of attacks can REDHAT-BUG-2323897 facilitate?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of REDHAT-BUG-2323897?

How do I fix REDHAT-BUG-2323897?

What does the REDHAT-BUG-2323897 vulnerability involve?

Is REDHAT-BUG-2323897 applicable to all versions of HAPI FHIR?

What types of attacks can REDHAT-BUG-2323897 facilitate?