CVE-2020-5733

In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts…

published April 17, 2020

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of potentially sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.5th percentile
Published
2020-04-17T18:27Z
EPSS history
Timeline
  • 17 APR 18:27Z
    In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts…
    cvelistv5