2690 matches found
PT-2022-18902 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue is related to improper access control, specifically an authorization bypass through a user-controlled key. This allows unauthorized access to certain resources. Recommendations: For...
CVE-2022-2824: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
Input validation
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734 Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734 Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2734
CVE-2022-2734 affects OpenEMR prior to 7.0.0.1 and is due to improper restriction of rendered UI layers or frames. Public descriptions consistently state the issue as a UI/iframe restriction vulnerability (clickjacking-related). The available connected documents describe the affected software and...
CVE-2022-2729
Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2733
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2729
Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2730
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2730
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...