← Database

CVE-2024-51132

CRITICAL CVSS: 9.8 Published: 2024-11-05 Modified: 2026-06-17

Description

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

Affected Platforms

Unknown

Weakness Type

CWE-611

References