CVE-2020-24301 - CVE House
Back to Database
Status published Medium CVE-2020-24301

Users of the HAPI FHIR Testpage Overlay 5.0.0 and below...

Vulnerability Description

Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbitrary JavaScript to be executed in the user's browser. The impact of this vulnerability is believed to be low, as this module is intended for testing and not believed to be widely used for any production purposes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-24301

Credits & Attribution

No credits recorded in the NVD database.

References

More from hapifhir

View All →
CVE-2024-52007
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
High 8.6
CVE-2024-45294
`org.hl7.fhir.core` XXE vulnerability in XSLT transforms
High 8.6

Affected Vendor

Affected Software

testpage overlay
Vulnerable Versions:
0

Timeline

Official Publish: October 8th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.