CVE-2017-9380: Malicious File Upload
Published Jun 2, 2017
·Updated
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
Affected Software
1 affected component
open-emr Openemr<=5.0.0
Event History
Jun 2, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9380?
CVE-2017-9380 has a high severity rating as it allows low-privilege users to execute arbitrary code.
2
How do I fix CVE-2017-9380?
To fix CVE-2017-9380, update OpenEMR to version 5.0.1 or later to mitigate this vulnerability.
3
Who is affected by CVE-2017-9380?
CVE-2017-9380 affects all versions of OpenEMR prior to 5.0.1.
4
What types of files can be uploaded due to CVE-2017-9380?
CVE-2017-9380 allows the upload of dangerous file types that can lead to code execution.
5
What impact does CVE-2017-9380 have on my system?
CVE-2017-9380 can compromise system security by allowing unauthorized code execution within the vulnerable application.