Security Advisory

CVE-2024-51132

9.8
CRITICAL

Vulnerability Description

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
Published Date November 5, 2024
Official Source NIST NVD Advisory