CVE-2018-19276: Critical severity OpenMRS Openmrs vulnerability
Published Mar 17, 2019
·Updated
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
Affected Software
3 affected components
OpenMRS Openmrs>=1.12.0<1.12.1
OpenMRS Openmrs>=2.0.0<2.0.8
OpenMRS Openmrs>=2.1.0<2.1.4
Event History
Mar 17, 2019
CVE Published
via MITRE·09:30 PM
Data Sourced
via MITRE·09:30 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2018-19276?
CVE-2018-19276 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2018-19276?
To fix CVE-2018-19276, upgrade OpenMRS to version 2.24.0 or later.
3
Who is affected by CVE-2018-19276?
CVE-2018-19276 affects OpenMRS versions prior to 2.24.0, specifically those in the 1.12.x, 2.0.x, and 2.1.x versions.
4
What type of vulnerability is CVE-2018-19276?
CVE-2018-19276 is classified as an Insecure Object Deserialization vulnerability.
5
Can an attacker exploit CVE-2018-19276 without authentication?
Yes, an unauthenticated attacker can exploit CVE-2018-19276 by sending crafted XML data.