4 matches found
CVE-2026-104133
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/modules/custommodules/oe-module-dorn/public/compendiuminstall.php checks authentication and CSRF but does not require the admin/users ACL enforced by sibling DORN...
CVE-2026-104133 OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/modules/custommodules/oe-module-dorn/public/compendiuminstall.php checks authentication and CSRF but does not require the admin/users ACL enforced by sibling DORN...
CVE-2026-104133 OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/modules/custommodules/oe-module-dorn/public/compendiuminstall.php checks authentication and CSRF but does not require the admin/users ACL enforced by sibling DORN...
CVE-2026-104133
Prior to version 8.3.0 , OpenEMR is vulnerable to a missing authorization flaw in the DORN module. Specifically, the file interface/modules/custom_modules/oe-module-dorn/public/compendium_install.php validates authentication and CSRF but fails to enforce the admin/users ACL required by other DORN...