CVE-2017-1000438

8.3 highEPSS 0.9%

High (8.3) in openmicroscopy omero. EPSS 0.9% chance of exploitation in the next 30 days.

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.

Severity

CVSS 3.0

8.3 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
Published: 2018-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openmicroscopy:omero

References

https://www.openmicroscopy.org/security/advisories/2017-SV5-filename-2/
https://www.openmicroscopy.org/security/advisories/2017-SV5-filename-2/

Check your stack JSON