Unrated severityOSV Advisory· Published Mar 17, 2019· Updated Aug 5, 2024
CVE-2018-19276
CVE-2018-19276
Description
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 1.12.0, 2.0.0, 2.0.1, …
Patches
Vulnerability mechanics
References
5- www.exploit-db.com/exploits/46327/mitreexploitx_refsource_EXPLOIT-DB
- packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.htmlmitrex_refsource_MISC
- packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.htmlmitrex_refsource_MISC
- know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserializationmitrex_refsource_MISC
- talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.