PT-2026-137722

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.4.0 Description Write actions within controllers/C Document.class.php, specifically the move action process function, fail to verify if the caller has appropriate access to the source document, the current patient a...