CVE-2023-2944

CVE-2023-2944 affects OpenEMR prior to 7.0.1 and is an Improper Access Control vulnerability. All documented sources describe that a low-privilege user could access or modify another user’s protected data in the address book, enabling viewing/editing of other users’ information. The issue is root...

CVE-2023-2943: Improper Control of Generation of Code

Code Injection in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2944

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2943

Code Injection in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947

CVE-2023-2947 is a stored XSS vulnerability in OpenEMR prior to 7.0.1, triggered via the admin panel’s Site Name/Branding field (admin.php). The root cause is inadequate sanitization of the text, enabling an attacker with admin access to inject HTML. Public sources corroborate OpenEMR

CVE-2023-2945

CVE-2023-2945 affects OpenEMR versions prior to 7.0.1, where a missing authorization flaw in the openemr/openemr repository can allow unauthorized actions. Public disclosures across NVD/Red Hat/OSV list the issue as missing authorization; Huntr notes potential exploitation via impersonation of hi...

OpenEMR input validation error vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An input validation error vulnerability previously existed in OpenEMR version 7.0....

CVE-2023-2946

OpenEMR (openemr/openemr) prior to version 7.0.1 is affected by an improper access control vulnerability. The issue originates from insufficient access restrictions, enabling unauthorized users to view/edit protected information. Reported impact includes exposure of user data and modification cap...

OpenEMR Access Control Error Vulnerability (CNVD-2023-40910)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in OpenEMR versions prior to 7.0.1,...

CVE-2023-2674

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

Improper access control

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

OpenEMR Access Control Vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An Access Control Error vulnerability exists in OpenEMR versions prior to 7.0.1,...

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2674: Improper Access Control

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2674 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

PT-2023-5357 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to improper access control in the OpenEMR software, which can be exploited by a remote attacker to disrupt the application's logic. Recommendations: For versions prior to 7.0.1...

CVE-2023-2674

CVE-2023-2674 describes an improper access control vulnerability in OpenEMR before version 7.0.1. Connected sources corroborate that a front-end OpenEMR user could gain authorization to perform restricted actions (e.g., adding a Pharmacy) due to weak access controls in the application’s practice/...

CVE-2023-2674

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2023-40913)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 7.0.1...