CVE-2024-51132

n/a / n/a PUBLISHED

Description (CNA)

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/hapifhir/org.hl7.fhir.core
https://github.com/JAckLosingHeart/CVE-2024-51132-POC

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.