medium6.1
CVE-2023-40817
Cross-site Scripting in OpenCRX
Impact
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.opencrx:opencrx-core-models | <= 5.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opencrx | Opencrx | Version 5.2.0 |