CVE-2022-1458

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1458

CVE-2022-1458 corresponds to a Stored XSS in OpenEMR (openemr/openemr) prior to 6.1.0.1, specifically in the Upload Document Template filename handling. The vulnerability can lead to session hijacking, potentially enabling account takeover. A fix is available in OpenEMR 6.1.0.1 or later; multiple...

PT-2022-13905

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0.1 Description A non-privileged user can enable or disable registration in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later to resolve the...

PT-2022-13903

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0.1 Description A security issue allows a non-privileged user to view a patient's disclosures in the openemr repository on GitHub. Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later ...

PT-2022-13902

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0.1 Description The issue allows for stored XSS, which can lead to session hijacking. Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later to resolve the issue...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. A cross-site scripting vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which stems from a lack of data validation filters for user-supplied data and output data in the file name on the "Upload Document...

CVE-2022-1461: Insufficient Granularity of Access Control

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1459: Insufficient Documentation of Error Handling Techniques

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2022-1458: Improper Neutralization of Input During Web Page Generation

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1...

OpenEMR安全漏洞

OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1 that stem...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 6.1.0.1, which can...

WS-2022-0201

Improper Privilege Management - receptionist can view background services and log for admin in openemr/openemr before 7.0.0...

WS-2022-0221

Improper authorization - receptionist can read all secure messaging in openemr/openemr before 700...

OpenEMR <= 6.0.0.2 XSS Vulnerability

OpenEMR is prone to an cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...

OpenEMR <= 6.0.0.4 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

OpenEMR <= 6.1.0 Privilege Escalation Vulnerability

OpenEMR is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61338)

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openEMR has a cross-site scripting vulnerability that stems from the lack ...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61336)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2022-61335)

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

OpenEMR Information Disclosure Vulnerability (CNVD-2022-82260)

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An insecure direct object reference vulnerability exists in OpenEMR versions prior...