CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-06-17

Last modified

2024-08-04

Affected products

• Omero.server (Openmicroscopy)

References

• https://www.openmicroscopy.org/security/advisories/2019-SV1/