CVE-2018-19276

Publication date

2019-03-17 21:30:20

Family

mitre

State

PUBLISHED

Description

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.