NOSH ChartingSystem Code Execution

The vulnerability of the loading function for the Organization/Practice module of the New Open Source Health NOSH ChartingSystem electronic medical record system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...

PT-2023-1419

Name of the Vulnerable Software and Affected Versions NOSH version 4a5cfdb Description The issue allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed, potentially enabling attackers to steal Protected Health...