Lucene search

K
cvelistMitreCVELIST:CVE-2017-7990
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-7990

2022-10-0316:23:00
mitre
www.cve.org
openmrs
csrf
xss
reporting module 1.12.0
csrf attacks
xss attacks
administrative authentication
webapp/reports/managereports.jsp

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

Related for CVELIST:CVE-2017-7990