AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-24301

MEDIUM · CVSS 6.1 EPSS 0.95% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-08 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2020-24301
Severity
MEDIUM
CVSS
6.1
EPSS
0.95%
Java

Original NVD Description

Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbitrary JavaScript to be executed in the user's browser. The impact of this vulnerability is believed to be low, as this module is intended for testing and not believed to be widely used for any production purposes.

Related CVEs

Other vulnerabilities affecting the same vendor(s)