PT-2019-16816

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.1 and earlier Description The patient file download interface in OpenEMR contains a directory traversal flaw. This flaw allows authenticated attackers to download arbitrary files from the host system. Recommendations For...

CVE-2019-3967: Improper Limitation of a Pathname to a Restricted Directory

In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system...