Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Reporting Module for OpenMRS 跨站请求伪造漏洞
Vulnerability Description
OpenMRS是一套开源的电子病历系统，Reporting Module是基于OpenMRS平台的报告管理模块。 基于OpenMRS平台的Reporting Module 1.12.0版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞向webapp/reports/manageReports.jsp文件中的‘name’字段注入JavaScript。
CVSS Information
N/A
Vulnerability Type
N/A