---
id: 4185
title: "[CVE-2019-8371] OpenEMR 5.0.1(6) - RCE and XSS"
cve: CVE-2019-8371
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/openemr-5-0-16-advisory"
published_at: "2019-09-10T00:00:00Z"
tags: ["rce", "xss", "advisory", "openemr", "cve-2019-8371", "cve-2019-8368"]
phying_url: "https://phying.com/item/4185"
lang: en
---

# [CVE-2019-8371] OpenEMR 5.0.1(6) - RCE and XSS

## Summary

Technical advisory for OpenEMR 5.0.1(6): high-risk RCE (CVE-2019-8371, CVSS 9.1) via letter-template PHP web shell upload, plus reflected XSS; upgrade to 5.0.2.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2019-8371
- **Published:** 2019-09-10T00:00:00Z
- **Original:** https://bishopfox.com/blog/openemr-5-0-16-advisory
- **Phying News:** https://phying.com/item/4185