CVE-2022-4727

MOYENNE 6.1CVE-2022-4727 · Published 27/12/2022 · updated 17/06/2026

En bref

CVE-2022-4727 est une vulnérabilité MOYENNE (CVSS 6.1) touchant appointment scheduling module (openmrs).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.95%, plus élevée que 61.4% des vulnérabilités.
Correctif : mettre à jour vers 1.17.0 ou plus récent.

Package	Affected versions	Patched versions
appointment scheduling module openmrs	`< 1.17.0`	`1.17.0`

Description

A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the component Notes Handler. The manipulation of the argument notes leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.17.0 is able to address this issue. The name of the patch is 2ccbe39c020809765de41eeb8ee4c70b5ec49cc8. It is recommended to upgrade the affected component. The identifier VDB-216741 was assigned to this vulnerability.

References

openmrs/openmrs-module-appointmentscheduling commit 2ccbe39 · Patch
openmrs/openmrs-module-appointmentscheduling#39 · Patch
openmrs/openmrs-module-appointmentscheduling release 1.17.0 · Release Notes
vuldb.com · Third Party Advisory

Autres vulnérabilités de appointment scheduling module

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

appointment scheduling module

openmrs

< 1.17.0

1.17.0

Description