CVE-2024-52007
6 advisories.
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r4 CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.r4 to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r4
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r4b CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.r4b to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r4b
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r5 CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.r5 to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.r5
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.utilities CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.utilities to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.utilities
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON
Maven/ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may CVE-2024-52007: high 8.6
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
Action: Upgrade ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may to 6.4.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.0 | - |
Fixed versions
| 6.4.0 |
Sources
- osv: GHSA-gr3c-q7xf-47vh#Maven/ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-6cr6-ph3p-f5rf
- https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-gr3c-q7xf-47vh
- https://nvd.nist.gov/vuln/detail/CVE-2024-52007
- https://github.com/hapifhir/org.hl7.fhir.core/issues/1571
- https://github.com/hapifhir/org.hl7.fhir.core/pull/1717
- https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#jaxp-documentbuilderfactory-saxparserfactory-and-dom4j
- https://cwe.mitre.org/data/definitions/611.html
- https://github.com/hapifhir/org.hl7.fhir.core
CVE-2024-52007 · published · modified · JSON