Open-Emr: >> Openemr >> 5.0.0 Security Vulnerabilities
The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.
CVSS Score
7.5
EPSS Score
0.012
Published
2017-08-01
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.
CVSS Score
8.8
EPSS Score
0.152
Published
2017-06-02
Page 18