Vulnerabilities

TI-2023-02763 CVE-2023-2947 · GHSA-9wxm-f297-p8w3

Cross-site Scripting (XSS) - Stored in openemr/openemr

HIGH 65

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.90401 Published 2023-05-27 Fixed in 7.0.1 CWE-79

TI-2023-02762 CVE-2023-2946 · GHSA-q3rp-jgjj-hj8w

HIGH 68

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00489 Published 2023-05-27 Fixed in 7.0.1 CWE-284

TI-2023-02761 CVE-2023-2945 · GHSA-xwfw-2pp3-pwh3

MEDIUM 58

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0043 Published 2023-05-27 Fixed in 7.0.1 CWE-862

TI-2023-02760 CVE-2023-2944 · GHSA-fcfm-4mh4-3rcc

MEDIUM 58

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00447 Published 2023-05-27 Fixed in 7.0.1 CWE-284

TI-2023-02759 CVE-2023-2943 · GHSA-3whc-2jm3-w8gr

HIGH 71

Code Injection in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0062 Published 2023-05-27 Fixed in 7.0.1 CWE-94

TI-2023-02758 CVE-2023-2942 · GHSA-gvq7-wxrc-h7vp

HIGH 70

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00795 Published 2023-05-27 Fixed in 7.0.1 CWE-20