{"cvss":0.0,"datePublished":"2020-10-14T00:00:00Z","dateUpdated":"2020-10-14T00:00:00Z","description":"OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.","dueDate":"","id":"CVE-2018-19276","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"openmrs","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"openmrs openmrs Deserialization of Untrusted Data","vendor":"openmrs"}