{"id":"CVE-2019-15563","details":"Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.","aliases":["GHSA-2chv-87wj-pjv2"],"modified":"2026-07-08T15:55:54.371381Z","published":"2019-08-26T15:15:12.237Z","references":[{"type":"ADVISORY","url":"https://github.com/OHDSI/WebAPI/milestone/28?closed=1"},{"type":"ADVISORY","url":"https://github.com/OHDSI/WebAPI/releases/tag/v2.7.2"},{"type":"FIX","url":"https://github.com/OHDSI/WebAPI/pull/1101"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ohdsi/webapi","events":[{"introduced":"0"},{"fixed":"93b7fa490459055bdf1675bd732462f973724bcf"}],"database_specific":{"cpe":"cpe:2.3:a:ohdsi:webapi:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.7.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v2.7.0","v2.5.0","v2.4.0","v2.3.0","v2.2.0","v2.1.2","v2.1.1","v2.1.0","v2.0.0","v1.5.0","v1.4.0","v1.3.1","v1.3.0","1.2.3","1.2.2","v1.2.1","v1.1.0","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15563.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}