CVE-2019-3967

CVE-2019-3967 affects OpenEMR 5.0.1 and earlier, where the patient file download interface contains a directory traversal flaw allowing authenticated attackers to download arbitrary files from the host system. The connected Red Hat and CNVD entries corroborate the affected product/version and the...