VULNERABILITY INTELLIGENCE

CVE-2020-5728

CVSS score6.1 MEDIUM
EPSS probability1.14%
CISA KEVNot currently listed
Published2020-04-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references