| Package | Affected versions | Patched versions |
|---|---|---|
| openmrs | ≤ 2.9.0 |
OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free