CVE-2019-3968: OS Command Injection
Published Aug 20, 2019
·Updated
In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.
Affected Software
1 affected component
open-emr Openemr<=5.0.1
Event History
Aug 20, 2019
CVE Published
via MITRE·06:01 PM
Data Sourced
via MITRE·06:01 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-3968?
CVE-2019-3968 is considered to be a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2019-3968?
To fix CVE-2019-3968, upgrade OpenEMR to version 5.0.2 or later.
3
Who is affected by CVE-2019-3968?
Users of OpenEMR versions 5.0.1 and earlier are vulnerable to CVE-2019-3968.
4
What are the potential impacts of CVE-2019-3968?
CVE-2019-3968 allows authenticated attackers to execute arbitrary commands on the host system.
5
When was CVE-2019-3968 disclosed?
CVE-2019-3968 was disclosed in January 2019.