org.opencrx:opencrx-core-models (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.opencrx:opencrx-core-models, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2021-25959 — CVSS 6.1 (medium): In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the…
• CVE-2023-40809 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.
• CVE-2023-40810 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
• CVE-2023-40812 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
• CVE-2023-40813 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
• CVE-2023-40814 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
• CVE-2023-40815 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
• CVE-2023-40816 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
• CVE-2023-40817 — CVSS 6.1 (medium): OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.