Lucene search

CVE-2017-12796

🗓️ 23 Oct 2017 04:00:00Reported by mitreType

The Reporting Compatibility Add On for OpenMRS allows remote unauthenticated users to execute operating system commands via malicious XML payload

Reporter	Title	Published	Views	Family All 4
Prion	Cross site request forgery (csrf)	23 Oct 201704:29	–	prion
NVD	CVE-2017-12796	23 Oct 201704:29	–	nvd
CVE	CVE-2017-12796	23 Oct 201704:29	–	cve
OSV	CVE-2017-12796	23 Oct 201704:29	–	osv

Source	Link
wiki	www.wiki.openmrs.org/display/RES/Release+Notes+2.6.1
isears	www.isears.github.io/jekyll/update/2017/10/21/openmrs-rce.html
talk	www.talk.openmrs.org/t/critical-security-advisory-2017-09-12/13291

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Oct 2017 04:00Current

9.8High risk

Vulners AI Score9.8

EPSS0.006