CVE-2018-19276 Scanner

Targets the REST API endpoint that deserializes user-supplied data, allowing an attacker to execute arbitrary code on the server.

Short Info


Level

Critical

Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

10 seconds

Time Interval

1 month 19 days

Scan only one

Domain, Subdomain, IPv4

Toolbox

OpenMRS is an open-source electronic medical record platform used by healthcare facilities in resource-limited settings to manage patient data, workflows, and clinical information. It is built on Java and supports modular extensions for customization.

CVE-2018-19276 is a critical deserialization of untrusted data vulnerability that occurs when OpenMRS processes serialized Java objects without proper validation. This flaw arises from the use of unsafe deserialization methods in the platform's core libraries.

The vulnerability is triggered via the REST API endpoint that accepts serialized objects, specifically in the module administration functionality. An attacker can craft a malicious serialized object that, when deserialized, executes arbitrary commands on the server.

If exploited, this vulnerability allows remote code execution with the privileges of the OpenMRS application, potentially leading to full system compromise, data theft, and disruption of healthcare services.

Get started to protecting your digital assets