CVE-2017-7990

PoC —

CVSS 3.0

8.8 high

EPSS

1%p64

Published

Apr 21, 2017 (Apr 21, 2017)

Modified

Jun 17, 2026

Description

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.

Vendors: openmrs
Products: openmrs module reporting
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.