Junglewise Threat Intelligence

CVE-2024-45294: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

CVE-2024-45294 · Severity: low · CVSS 3.1 · Published 2024-09-06

Technologies: ca.uhn.hapi.fhir:org.hl7.fhir.utilities (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r5 (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r4 (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r4b (Maven). Vendors: Maven.

Executive brief

XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

Affected products

  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.utilities
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.dstu3
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.r5
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.r4
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.r4b

Related threats