← All advisories

Critical severity9.8OSV Advisory· Published Sep 5, 2018· Updated Jun 17, 2026

CVE-2018-16521

CVE-2018-16521

Description

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Openmrs/Openmrs Module HtmlformentryOSV
Range: 1.0, 1.0.1, 1.8.0, …
Openmrs/HTML Form Entryllm-create
Range: <=3.7.0

Patches

Vulnerability mechanics

References

2

github.com/openmrs/openmrs-module-htmlformentry/pull/137nvdPatchThird Party Advisory
github.com/openmrs/openmrs-module-htmlformentry/pull/138nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.