critical9.8
CVE-2018-16521
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
Impact
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openmrs | Html Form Entry | Version 3.7.0 |
| Openmrs | Reference Application | Version 2.8.0 |