Vulnerabilities

TI-2023-02766 CVE-2023-2950 · GHSA-whgx-7f64-hx6j

Improper Authorization in openemr/openemr

HIGH 68

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00559 Published 2023-05-28 Fixed in 7.0.1 CWE-285

TI-2023-02765 CVE-2023-2949 · GHSA-ffmm-jx9r-2g49

LOW 32

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01472 Published 2023-05-28 Fixed in 7.0.1 CWE-79

TI-2023-02764 CVE-2023-2948 · GHSA-9942-rg4x-mcpv

HIGH 74

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.96731 Published 2023-05-28 Fixed in 7.0.1 CWE-79