CVE-2014-3862 in HL7 C-CDA
Summary
CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log.
Reservation
05/25/2014
Disclosure
09/02/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70787 | HL7 C-CDA information disclosure | 200 | Not defined | Not defined | CVE-2014-3862 |