OpenEMR Access Control Error Vulnerability (CNVD-2023-40910)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in OpenEMR versions prior to 7.0.1, which stems from improper application access control. An attacker could exploit the vulnerability to allow a front-end user to add any pharmacy, which could break the logic of the application.