| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may | < 6.3.23 | 6.3.23 |
| ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 | < 6.3.23 | 6.3.23 |
| ca.uhn.hapi.fhir:org.hl7.fhir.r4 | < 6.3.23 | 6.3.23 |
| ca.uhn.hapi.fhir:org.hl7.fhir.r4b | < 6.3.23 | 6.3.23 |
| ca.uhn.hapi.fhir:org.hl7.fhir.r5 | < 6.3.23 | 6.3.23 |
| ca.uhn.hapi.fhir:org.hl7.fhir.utilities | < 6.3.23 | 6.3.23 |
XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag ( <!DOCTYPE foo [<!ENTITY example SYSTEM "/etc/passwd"> ]> could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients can submit XML.
This issue has been patched in release 6.3.23
None.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí