CVE-2017-12796

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-12796

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12796.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-12796

Published

2017-10-23T04:29:00.210Z

Modified

2026-04-10T03:56:52.788087Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system commands by crafting malicious XML payloads, as demonstrated by a single admin/reports/reportSchemaXml.form request.

References

Affected packages

Git / github.com/openmrs/openmrs-core

Affected ranges

Type

GIT

Repo

https://github.com/openmrs/openmrs-core

Events

Introduced

Fixed

0b8ae6299f65159fe7d9b06a6c679834378d31b8

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6.1"
        }
    ]
}

Affected versions

1.*

1.1.0

1.2.0

1.2.01

1.2.01-RC1

1.3.0-RC1

1.3.0-RC2

1.3.0-RC3

1.3.0-RC4

2.*

2.2.0-20181112.082045-243

2.4.0-alpha

2.6.0

2.6.0-beta

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12796.json"