CVE-2018-1000219

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1000219
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000219.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1000219
Published
2018-08-20T20:29:00Z
Modified
2025-01-14T07:20:32.943908Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

OpenEMR version v5014 contains a Cross Site Scripting (XSS) vulnerability in The 'scan' parameter in line #41 of interface/fax/faxview.php that can result in The vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.. This attack appear to be exploitable via The victim must visit on a specially crafted URL..

References

Affected packages

Git / github.com/openemr/openemr

Affected ranges

Type
GIT
Repo
https://github.com/openemr/openemr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

Other

v2_7_2
v2_7_2-rc1
v2_7_2-rc2
v2_7_3-rc1
v2_8_0
v2_8_1
v2_8_2
v2_8_3
v2_9_0
v3_0_0
v3_0_1
v5_0_1
v5_0_1_1
v5_0_1_2
v5_0_1_3
v5_0_1_4