CVE-2017-12064

The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a…

published August 1, 2017

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01317 · 70.6th percentile
Published
2017-08-01T05:00Z
EPSS history
Timeline
  • 01 AUG 05:00Z
    The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a…
    cvelistv5