2160 matches found
CVE-2023-2948
OpenEMR
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...
PT-2023-5352 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper authorization in the OpenEMR software, which can be exploited by a remote attacker to perform HTML injection. Recommendations: For versions prior to 7.0.1, update t...
CVE-2023-2949
OpenEMR
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
OpenEMR 授权问题漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An authorization issue vulnerability previously existed in OpenEMR version 7.0.1. ...
CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2949 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
PT-2023-5347 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr/openemr versions prior to 7.0.1 Description: The issue is related to Cross-site Scripting XSS - Reflected, which can be exploited by a remote attacker to perform inter-site script attacks. This is due to the lack of protection measure...
CVE-2023-2949 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2946
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2946
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
Improper access control
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...