Vulnerabilities

TI-2022-02532 CVE-2022-2734 · GHSA-m366-qhcj-gfw3

Improper Restriction of Rendered UI Layers or Frames in openemr/openemr

LOW 26

Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00836 Published 2022-08-09 Fixed in 7.0.0.1 CWE-1021

TI-2022-02530 CVE-2022-2732 · GHSA-2266-6m7r-fxww

HIGH 71

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01041 Published 2022-08-09 Fixed in 7.0.0.1 CWE-862

TI-2022-02531 CVE-2022-2733 · GHSA-5376-hj3w-gxw6

HIGH 71

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.95859 Published 2022-08-09 Fixed in 7.0.0.1 CWE-79

TI-2022-02529 CVE-2022-2731 · GHSA-wv2j-j29v-4252

LOW 28

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2022-08-09 Fixed in 7.0.0.1 CWE-79

TI-2022-02527 CVE-2022-2729 · GHSA-4g8f-4v3f-79wh

LOW 25

Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2022-08-09 Fixed in 7.0.0.1 CWE-79

TI-2022-02528 CVE-2022-2730 · GHSA-5jf7-8333-m22j

LOW 30

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00824 Published 2022-08-09 Fixed in 7.0.0.1 CWE-639