~ / search / GHSA-2chv-87wj-pjv2

GHSA-2chv-87wj-pjv2

OHDSI WebAPI vulnerable to SQL Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-15563

Packages

EcosystemPackageAffectedFixed in
Maven org.ohdsi:WebAPI < 2.7.2 2.7.2

Details

As written in the advisory (Markdown source, shown as plain text).

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in `FeatureExtractionService.java`.

References

External links from the advisory. They lead to third-party sites.