CVE-2023-22974

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an…

published February 22, 2023

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01892 · 79.4th percentile
Published
2023-02-22T00:00Z
EPSS history
Timeline
  • 22 FEB 00:00Z
    A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an…
    cvelistv5