2694 matches found
PT-2023-5347 · Openemr · Openemr
Name of the Vulnerable Software and Affected Versions: openemr/openemr versions prior to 7.0.1 Description: The issue is related to Cross-site Scripting XSS - Reflected, which can be exploited by a remote attacker to perform inter-site script attacks. This is due to the lack of protection measure...
CVE-2023-2949 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950: Improper Authorization
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2949 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...
CVE-2023-2948
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
OpenEMR authorization issue vulnerability
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An authorization issue vulnerability previously existed in OpenEMR version 7.0.1. ...
CVE-2023-2946
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2946
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
Improper access control
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2943
Code Injection in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2943
Code Injection in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2945
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2945
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...