Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

dhis2-core — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in dhis2-core, with AI-generated Chinese analysis, references, and POCs.

Vendor: dhis2

CVE IDTitleCVSSSeverityPublished
CVE-2023-32060 DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events CWE-284 6.5 Medium2023-05-09
CVE-2023-31139 DHIS2 Core unrestricted session cookies with Personal Access Tokens CWE-613 4.3 Medium2023-05-09
CVE-2023-31138 DHIS2 Core vulnerable to Improper Access Control with PATCH requests CWE-284 7.1 High2023-05-09
CVE-2022-41947 Cross-site Scripting with user-uploaded files in dhis2-core CWE-79 5.4 Medium2022-12-08
CVE-2022-41948 Privilege Chaining with the user admin role in dhis2-core CWE-269 6.7 Medium2022-12-08
CVE-2022-41949 Semi-blind Server-Side Request Forgery in dhis2-core CWE-918 5.0 Medium2022-12-08
CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association CWE-89 8.8 High2022-06-01
CVE-2021-41187 SQL Injection in DHIS2 Tracker API CWE-89 8.1 High2021-11-01
CVE-2021-39179 SQL Injection in DHIS2 Tracker API CWE-89 8.8 High2021-10-29
CVE-2021-32704 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core CWE-89 8.5 High2021-06-24

All 10 known CVE vulnerabilities affecting dhis2-core with full Chinese analysis, references, and POCs where available.