Non évaluée

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attac...

CVE-2018-1000839 Première détection SecPulse Dec 21, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Remote Code Execution. This attack appear to be exploitable via Uploading a PHP file with image MIME type.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

report 0dd.zone
report github.com

Faits clés

Gravité: Non évaluée
Publication: Dec 21, 2018
Première détection SecPulse: Dec 21, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49