openmrs/openmrs-module-htmlformentry

openmrs/openmrs-module-htmlformentry

on GitHub

66 releases

new releases every 2 months 1 week

last release was 09/06/2023

last checked yesterday at 11:34 PM

41

HTML Form Entry module

Log in to subscribe

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2020-24621	September 25, 2020	8.8 HIGH	6.5 MEDIUM
A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed.
CVE-2017-12795	May 10, 2019	9.8 CRITICAL	7.5 HIGH
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).
CVE-2018-16521	September 5, 2018	9.8 CRITICAL	7.5 HIGH
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.