← CVE Intelligence

CVE-2020-5728

n/a / OpenMRS PUBLISHED

Description (CNA)

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.

Affected (CNA)

Vendor / productVersions
n/a / OpenMRSaffected Versions 2.90 and prior

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.