CVE-2020-5728

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm)

published April 17, 2020

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01143 · 66.4th percentile
Published
2020-04-17T18:29Z
EPSS history
Timeline
  • 17 APR 18:29Z
    OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm)
    cvelistv5