CVE-2020-24621
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.1%
A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed.
Produtos afetados
n/a · n/aReferências
https://github.com/openmrs/openmrs-module-htmlformentry/pull/178https://github.com/openmrs/openmrs-module-uiframework/pull/59https://issues.openmrs.org/browse/HTML-730https://www.contrastsecurity.com/security-influencershttps://www.contrastsecurity.com/security-influencers/authenticated-remote-code-execution-openmrs