CVE-2021-4284

LOW

OpenMRS HTML Form Entry UI Framework Integration Module <2.0.0 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is 811990972ea07649ae33c4b56c61c3b520895f07. It is recommended to upgrade the affected component. The identifier VDB-216873 was assigned to this vulnerability.

References (6)

Core 6
Core References
Third Party Advisory vdb-entry
https://vuldb.com/?id.216873
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.216873
Patch, Third Party Advisory issue-tracking
https://github.com/openmrs/openmrs-module-htmlformentryui/pull/51
Issue Tracking, Permissions Required, Vendor Advisory related
https://issues.openmrs.org/browse/RA-1424?filter=-1

Scores

CVSS v3 3.5
EPSS 0.0087
EPSS Percentile 75.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
openmrs/htmlformentryui < 2.0.0
Published Dec 27, 2022
Tracked Since Feb 18, 2026