CVE-2014-3862 | BDVDB-2026-63397 Detail

Description#

CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-09-02Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.