CVE-2020-5732

In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticated users to use a feature typically restricted to administrators...

CVE-2020-5732

CVE-2020-5732 affects OpenMRS 2.9 and earlier, specifically the Data Exchange Module’s import functionality. The root cause is an improper redirect to the login page for unauthenticated access, enabling unauthenticated users to reach a feature typically restricted to administrators. The available...