CVE-2018-17180

MEDIUM

OpenEMR <5.0.1 - Path Traversal

Title source: llm

An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php.

Core 2

Core References

Patch, Vendor Advisory x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

CVSS v3 5.3

EPSS 0.0013

EPSS Percentile 31.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-22

Status published

Products (1)

open-emr/openemr < 5.0.1.7

Published May 17, 2019

Tracked Since Feb 18, 2026