CVE-2017-9380
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
- Affected products
- Openemr
- Open-emr Openemr
- ≤ 5.0.0
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 15.2% (97th percentile)
- Weakness
- CWE-434
- NVD status
- Modified
- Published
- 2017-06-02
CVE-2017-9380 at NVD
4 known exploits for CVE-2017-9380
Proof-of-concept code and exploit modules indexed by Sploitus