| Package | Affected versions | Patched versions |
|---|---|---|
| c-cda | ≤ 1.1 |
CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free