14 matches found
CVE-2020-24621
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
CVE-2020-24621
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
CVE-2020-24621
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
CVE-2020-24621
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
CVE-2020-24621
The CVE concerns OpenMRS htmlformentry module prior to version 3.11.0. A path traversal flaw could allow writing a malicious Velocity Template Language file to a directory, which could then be accessed and executed, enabling remote code execution. Affected component: htmlformentry module in OpenM...
PT-2020-15772
Name of the Vulnerable Software and Affected Versions OpenMRS htmlformentry module versions prior to 3.11.0 Description A remote code execution issue was discovered, allowing a malicious Velocity Template Language file to be written to a directory through path traversal. This file could then be...
CVE-2020-24621: Improper Limitation of a Pathname to a Restricted Directory
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
Input validation
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
CVE-2017-12795 affects OpenMRS OpenMRS module-htmlformentry 3.3.2 with an improper input validation vulnerability. Root cause and exact vulnerable component are not elaborated beyond the module name; impact is described generally as a validation error, with CVSS indicating high to critical severi...
PT-2019-7918
Name of the Vulnerable Software and Affected Versions OpenMRS openmrs-module-htmlformentry version 3.3.2 Description The issue is related to improper input validation. Recommendations For OpenMRS openmrs-module-htmlformentry version 3.3.2, update to a version that addresses the improper input...