Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that is improperly handled during unrestricted xsl:copy operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HL7 C-CDA 跨站脚本漏洞
Vulnerability Description
HL7 C-CDA是美国Health Level Seven（HL7）组织开发的一套用于医疗行业的以交换文档为目的的临床文档结构，也是一种指定结构和语意的文档标记标准，它可对信息对象进行定义，如文本、图像、声音和其它多媒体内容。 HL7 C-CDA 1.1及之前版本的CDA.xsl文件中存在跨站脚本漏洞，该漏洞源于程序没有正确处理包含XML属性无效的C-CDA文档。远程攻击者可借助带有表单的文档利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A