CVE-2019-15563 - Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java

CRITICAL

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java

Published Aug 26, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 1.90%

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1965		Advisory
https://github.com/OHDSI/WebAPI/commit/d7b12b2f5234e425e5bc76545e75de0d6eb3f8fd
https://github.com/OHDSI/WebAPI/milestone/28?closed=1		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/OHDSI/WebAPI/pull/1101		x_refsource_MISCPatchThird Party Advisory
https://github.com/OHDSI/WebAPI/releases/tag/v2.7.2		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/advisories/GHSA-2chv-87wj-pjv2		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15563