CVE-2018-10572

interface/patientfile/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and formbody parameters...

PT-2018-9970

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.1 Description: The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via the newtemplatename and form body parameters in the interface/patient file/letter.php file...

CVE-2018-10572: Undefined Security Weakness

interface/patientfile/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and formbody parameters...