PT-2022-11701 · Openmrs · Openmrs Html Form Entry Ui Framework Integration Module

Jnsereko · Published 2022-12-27 · Updated 2024-05-17 · CVE-2021-4284

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenMRS HTML Form Entry UI Framework Integration Module versions up to 1.x

Description A vulnerability has been found in the OpenMRS HTML Form Entry UI Framework Integration Module, which affects an unknown part and leads to cross-site scripting. The manipulation can be initiated remotely.

Recommendations For OpenMRS HTML Form Entry UI Framework Integration Module versions up to 1.x, upgrade to version 2.0.0 to address this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-4284

Affected Products

Openmrs Html Form Entry Ui Framework Integration Module

References · 11

• https://github.com/openmrs/openmrs-module-htmlformentryui/commit/811990972ea07649ae33c4b56c61c3b520895f07 · Patch
• https://github.com/openmrs/openmrs-module-htmlformentryui/releases/tag/2.0.0 · Patch
• https://github.com/openmrs/openmrs-module-htmlformentryui/pull/51 · Patch
• https://osv.dev/vulnerability/CVE-2021-4284 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4284 · Security Note
• https://issues.openmrs.org/browse/RA-1424?filter=-1 · Vendor Advisory
• https://t.me/cvenotify/40765 · Telegram Post
• https://vuldb.com/?ctiid.216873 · Note
• https://vuldb.com/?id.216873 · Note
• https://t.me/cibsecurity/55386 · Telegram Post
• https://t.me/cvenotify/41374 · Telegram Post