---
id: 4206
title: "[CVE-2018-19276] OpenMRS - Insecure Object Deserialization"
cve: CVE-2018-19276
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/openmrs-insecure-object-deserialization-advisory"
published_at: "2019-02-04T00:00:00Z"
tags: ["rce", "open-source", "deserialization", "healthcare", "openmrs", "cve-2018-19276"]
phying_url: "https://phying.com/item/4206"
lang: en
---

# [CVE-2018-19276] OpenMRS - Insecure Object Deserialization

## Summary

Critical insecure object deserialization in OpenMRS (CVE-2018-19276) lets unauthenticated attackers run commands via the REST API, risking massive healthcare data exposure.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2018-19276
- **Published:** 2019-02-04T00:00:00Z
- **Original:** https://bishopfox.com/blog/openmrs-insecure-object-deserialization-advisory
- **Phying News:** https://phying.com/item/4206