PT-2019-7918 · Openmrs · Openmrs

Published 2019-05-10 · Updated 2019-05-10 · CVE-2017-12795

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenMRS openmrs-module-htmlformentry version 3.3.2

Description The issue is related to improper input validation.

Recommendations For OpenMRS openmrs-module-htmlformentry version 3.3.2, update to a version that addresses the improper input validation issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-12795

Affected Products

Openmrs

References · 6

• https://github.com/openmrs/openmrs-module-htmlformentry/commit/86f35221c8a57cdd7557ce731a56b90db216c8e0 · Patch
• https://osv.dev/vulnerability/CVE-2017-12795 · Vendor Advisory
• http://openmrs.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12795 · Security Note
• https://github.com/openmrs/openmrs-module-htmlformentry/compare/f50bdf1...cc0be04 · Note
• http://openmrs-module-htmlformentry.com · Note