Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.
{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "2.7.2"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
],
"cpe": "cpe:2.3:a:ohdsi:webapi:*:*:*:*:*:*:*:*"
}