CVE-2018-19276 Scanner
Targets the REST API endpoint that deserializes user-supplied data, allowing an attacker to execute arbitrary code on the server.
Short Info
Level
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
1 month 19 days
Scan only one
Domain, Subdomain, IPv4
Toolbox
OpenMRS is an open-source electronic medical record platform used by healthcare facilities in resource-limited settings to manage patient data, workflows, and clinical information. It is built on Java and supports modular extensions for customization.
CVE-2018-19276 is a critical deserialization of untrusted data vulnerability that occurs when OpenMRS processes serialized Java objects without proper validation. This flaw arises from the use of unsafe deserialization methods in the platform's core libraries.
The vulnerability is triggered via the REST API endpoint that accepts serialized objects, specifically in the module administration functionality. An attacker can craft a malicious serialized object that, when deserialized, executes arbitrary commands on the server.
If exploited, this vulnerability allows remote code execution with the privileges of the OpenMRS application, potentially leading to full system compromise, data theft, and disruption of healthcare services.
