What is CVE-2021-41187?

CVE-2021-41187 is a high-severity vulnerability in Dhis2 Dhis_2, classified under SQL Injection. CVSS score: 8.1/10. Published 2021-11-01.

How severe is CVE-2021-41187?

High severity. CVSS v3 base score is 8.1 out of 10.

SQL Injection in Dhis2 Dhis_2

CVE-2021-41187

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the API endpoints for /a…

Vulnerability class: SQL Injection

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Dhis2 Dhis_2
Dhis2 Dhis2-core — versions >= 2.32.0, < 2.32-EOS, >= 2.33.0, < 2.33-EOS, >= 2.34.0, < 2.34.7

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2021-41187?: CVE-2021-41187 is a high-severity vulnerability in Dhis2 Dhis_2, classified under SQL Injection. CVSS score: 8.1/10. Published 2021-11-01.
How severe is CVE-2021-41187?: High severity. CVSS v3 base score is 8.1 out of 10.