CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system vi…
Published: 2019-03-17 · CVSS: 10.0 · CVSS 3.0
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7