Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.00884·Published 2022-04-11·Fixed in LPI 3.5.12.P30CWE-288