CVE-2018-19276

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

99%p100

Published

Mar 21, 2019 (Mar 21, 2019)

Modified

Jun 17, 2026

Description

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.

Vendors: openmrs
Products: openmrs
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (98.7%)

In the news0 stories

No ingested article mentions this CVE yet.