XSS in Dhis2 Dhis2-core
CVE-2026-55081
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the `scope` query parameter into the generated HTML document without suffic…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Dhis2 Dhis2-core — versions >= 2.42.0, < 2.42.5.1, >= 2.43.0, < 2.43.0.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)