← Database

CVE-2023-23637

HIGH CVSS: 7.6 Published: 2023-01-17 Modified: 2026-06-17

Description

IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder. This may allow attackers to steal Protected Health Information.

Affected Platforms

Unistra Impatient

Weakness Type

CWE-79, CWE-79

References