TI-2020-14870 CVE-2020-24301 · GHSA-qj2c-3m6w-qr56Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL…Priority LOW 29Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbitrary JavaScript to be executed in the user's browser.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00947 · Published 2020-10-08 · No fix listed CWE-79