Unrated
An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php.
CVE-2018-17180
First seen on SecPulse
References
- patch github.com
- patch open-emr.org