PT-2019-7918 · Openmrs · Openmrs

Publicado 2019-05-10 · Atualizado 2019-05-10 · CVE-2017-12795

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenMRS openmrs-module-htmlformentry version 3.3.2

Description The issue is related to improper input validation.

Recommendations For OpenMRS openmrs-module-htmlformentry version 3.3.2, update to a version that addresses the improper input validation issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-12795

Produtos afetados

Openmrs

Referências · 6

• https://github.com/openmrs/openmrs-module-htmlformentry/commit/86f35221c8a57cdd7557ce731a56b90db216c8e0 · Correção
• https://github.com/openmrs/openmrs-module-htmlformentry/compare/f50bdf1...cc0be04 · Nota
• http://openmrs-module-htmlformentry.com · Nota
• https://osv.dev/vulnerability/CVE-2017-12795 · Aviso do Fabricante
• http://openmrs.com · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12795 · Nota de Segurança