critical9.8
CVE-2021-43094
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on ar…
Impact
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openmrs | Openmrs | through 2.4.0 |
| Openmrs | Reference Application | through 2.11 |