⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-3861

MEDIUM · 4.3 CVSS Gepubliceerd: 02-09-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element.

Vendors

Hl7

Affected products

C-cda

References

gforge.hl7.org
motorcycleguy.blogspot.com
smartplatforms.org