Security Advisory

CVE-2020-5729

6.1
MEDIUM

Vulnerability Description

In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is susceptible to this issue.
Published Date April 17, 2020
Official Source NIST NVD Advisory