CVE-2020-36635

MOYENNE 5.4CVE-2020-36635 · Published 27/12/2022 · updated 17/06/2026

En bref

CVE-2020-36635 est une vulnérabilité MOYENNE (CVSS 5.4) touchant appointment scheduling module (openmrs).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.96%, plus élevée que 61.7% des vulnérabilités.
Correctif : mettre à jour vers 1.13.0 ou plus récent.

Package	Affected versions	Patched versions
appointment scheduling module openmrs	`< 1.13.0`	`1.13.0`

Description

A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/openmrs/module/appointmentscheduling/validator/AppointmentTypeValidator.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.13.0 is able to address this issue. The name of the patch is 34213c3f6ea22df427573076fb62744694f601d8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216915.

References

openmrs/openmrs-module-appointmentscheduling commit 34213c3 · Patch
openmrs/openmrs-module-appointmentscheduling#32 · Patch
openmrs/openmrs-module-appointmentscheduling release 1.13.0 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Autres vulnérabilités de appointment scheduling module

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

appointment scheduling module

openmrs

< 1.13.0

1.13.0

Description