PT-2022-16127

🗓️ 22 Feb 2022 00:00:00Reported by Positive TechnologiesType

OpenMRS allows file exfiltration via GET to /images and /initfilter/scripts; update to fixed versions or restrict access.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-23612	23 Feb 202202:12	–	circl
CNNVD	OpenMRS 路径遍历漏洞	22 Feb 202200:00	–	cnnvd
CVE	CVE-2022-23612	22 Feb 202222:55	–	cve
Cvelist	CVE-2022-23612 Directory Traversal in OpenMRS Startup Filter	22 Feb 202222:55	–	cvelist
EUVD	EUVD-2022-28581	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23612	22 Feb 202223:15	–	nvd
OpenVAS	OpenMRS 1.6 - 2.5.x Directory Traversal Vulnerability (GHSA-8rgr-ww69-jv65)	28 Feb 202200:00	–	openvas
OSV	CVE-2022-23612 Directory Traversal in OpenMRS Startup Filter	22 Feb 202222:55	–	osv
Prion	Design/Logic Flaw	22 Feb 202223:15	–	prion
RedhatCVE	CVE-2022-23612	5 Feb 202523:18	–	redhatcve

Source	Link
twitter	www.twitter.com/dailycve/status/2051428638914945327
github	www.github.com/openmrs/openmrs-core/blob/ee3373a7a775bfdfa263e2e912c72e64342fb4f0/web/src/main/java/org/openmrs/web/filter/StartupFilter.java
t	www.t.me/cvenotify/27187
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23612
t	www.t.me/cvenotify/27605
osv	www.osv.dev/vulnerability/CVE-2022-23612
t	www.t.me/cibsecurity/37910
lgtm	www.lgtm.com/projects/g/openmrs/openmrs-core/snapshot/fb1335c925ca4c94be5a546707b90d2c1efa4dcc/files/web/src/main/java/org/openmrs/web/filter/StartupFilter.java
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23612.json
github	www.github.com/openmrs/openmrs-core/commit/db8454bf19a092a78d53ee4dba2af628b730a6e7

04 May 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 25

EPSS0.00402

SSVC