← All advisories

Medium severity5.4NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026

CVE-2023-27150

CVE-2023-27150

Description

openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.opencrx:opencrx-coreMaven	<= 5.2.0	—

Affected products

3

OpenCRX/openCRX
cpe:2.3:a:opencrx:opencrx:5.2.0:*:*:*:*:*:*:*
openCRX/openCRXdescription
ghsa-coords
pkg:maven/org.opencrx/opencrx-core
Range: <= 5.2.0

Patches

Vulnerability mechanics

References

6

www.esecforte.com/cve-2023-27150-cross-site-scripting-xss/nvdExploitThird Party Advisory
github.com/advisories/GHSA-8wjx-p2f8-5rjpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-27150ghsaADVISORY
www.esecforte.com/cve-2023-27150-cross-site-scripting-xssghsaWEB
www.opencrx.orgghsaWEB
www.opencrx.orgnvdProduct

News mentions

0

No linked articles in our index yet.