CVE-2023-22974

High

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to…

mitre·CWE-552·Published 2023-02-22

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

176 chars

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.

NVDen

176 chars

A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.

Un salto de ruta en setup.php en OpenEMR anterior a 7.0.0 permite a usuarios remotos no autenticados leer archivos arbitrarios al controlar una conexión a un servidor MySQL controlado por un atacante.

CVE-2023-22974

CVSS metrics across sources