Opencrx

14 CVEs across 1 Opencrx products. Browse Opencrx vulnerabilities, severities, and proof-of-concept exploits.

Opencrx products with known CVEs

ProductCVEs
Opencrx14
Opencrx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-27151Medium6.12024-02-29openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (in the Saved Search Activity) via the Name, Descri…
CVE-2023-27150Medium5.42023-12-26openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.
CVE-2023-40817Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
CVE-2023-40816Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
CVE-2023-40815Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
CVE-2023-40814Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
CVE-2023-40813Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
CVE-2023-40812Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
CVE-2023-40810Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
CVE-2023-40809Medium6.12023-11-18OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.
CVE-2023-46502Critical9.82023-10-30An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.
CVE-2022-40084Medium5.32022-10-20OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which co…
CVE-2021-25959Medium6.12021-09-29In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset function…
CVE-2020-7378Critical9.12020-11-24CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affec…