CVE-2021-4289

MEDIUM 6.1CVE-2021-4289 · Published 27/12/2022 · updated 17/06/2026

In short

CVE-2021-4289 is a MEDIUM (CVSS 6.1) vulnerability affecting reference application (openmrs).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
Fix: update to 2.12.0 or later.

Package	Affected versions	Patched versions
reference application openmrs	`< 2.12.0`	`2.12.0`

Description

A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affected by this vulnerability is the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserAppPageController.java of the component User App Page. The manipulation of the argument AppId leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.12.0 is able to address this issue. The name of the patch is 0410c091d46eed3c132fe0fcafe5964182659f74. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216883.

References

openmrs/openmrs-module-referenceapplication commit 0410c09 · Patch
openmrs/openmrs-module-referenceapplication#89 · Patch
openmrs/openmrs-module-referenceapplication release referenceapplication-2.12.0 · Release Notes
issues.openmrs.org/browse/RA-1875 · Issue Tracking
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in reference application

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

reference application

openmrs

< 2.12.0

2.12.0

Description

More vulnerabilities in reference application

See all →