What’s Vulnerable › Vulnerabilities

CVE-2017-7990

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-04-21 · updated 2026-06-17
• Weakness: CWE-352

Description

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.

Affected products

• Openmrs Module Reporting: 1.12.0

References

• https://github.com/openmrs/openmrs-module-reporting/pull/141/commits/0023a659288538d2763835847d3414ecb18b931a#diff-50e25eddc5909110fa3d31090877c2fd
• https://www.youtube.com/watch?v=pfrIaNvIuFY
• https://github.com/openmrs/openmrs-module-reporting/pull/141/commits/0023a659288538d2763835847d3414ecb18b931a#diff-50e25eddc5909110fa3d31090877c2fd
• https://www.youtube.com/watch?v=pfrIaNvIuFY

Get alerted when CVE-2017-7990 or the next vulnerability affects your stack