CVE-2020-24621

A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed.

• CWE-22

• https://github.com/openmrs/openmrs-module-htmlformentry/pull/178Patch, Third Party Advisory
• https://github.com/openmrs/openmrs-module-uiframework/pull/59Patch, Third Party Advisory
• https://issues.openmrs.org/browse/HTML-730Vendor Advisory
• https://www.contrastsecurity.com/security-influencersThird Party Advisory
• https://www.contrastsecurity.com/security-influencers/authenticated-remote-code-execution-openmrsExploit, Third Party Advisory
• https://github.com/openmrs/openmrs-module-htmlformentry/pull/178Patch, Third Party Advisory
• https://github.com/openmrs/openmrs-module-uiframework/pull/59Patch, Third Party Advisory
• https://issues.openmrs.org/browse/HTML-730Vendor Advisory
• https://www.contrastsecurity.com/security-influencersThird Party Advisory
• https://www.contrastsecurity.com/security-influencers/authenticated-remote-code-execution-openmrsExploit, Third Party Advisory

Published

Sep 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24615Pexip Infinity before 24.1 has Improper Input Validation, le…5.3
• CVE-2020-24616FasterXML jackson-databind 2.x before 2.9.10.6 mishandles th…8.1
• CVE-2020-24617Mailtrain through 1.24.1 allows SQL Injection in statsClicke…8.8
• CVE-2020-24618In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11…6.5
• CVE-2020-24619In mainwindow.cpp in Shotcut before 20.09.13, the upgrade ch…5.9
• CVE-2020-24620Unisys Stealth(core) before 4.0.134 stores passwords in a re…7.8
• CVE-2020-24622In Sonatype Nexus Repository 3.26.1, an S3 secret key can be…4.9
• CVE-2020-24623A potential security vulnerability has been identified in He…6.5
• CVE-2020-24624Unathenticated directory traversal in the DownloadServlet cl…7.5
• CVE-2020-24625Unathenticated directory traversal in the ReceiverServlet cl…7.5
• CVE-2020-24626Unathenticated directory traversal in the ReceiverServlet cl…9.8
• CVE-2020-24627A remote stored xss vulnerability was discovered in HPE KVM …5.4