PT-2021-22871

Name of the Vulnerable Software and Affected Versions OpenEMR version 6.0.0 Description The issue allows an attacker to read the messages of all users due to an Insecure Direct Object Reference vulnerability. This can be exploited via the pnotes print.php endpoint with the noteid parameter...