Vulnerabilities

TI-2022-04119 CVE-2022-4506 · GHSA-w6pw-jxf7-p7gx

Unrestricted Upload of File with Dangerous Type in openemr/openemr

HIGH 71

Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01119 Published 2022-12-15 Fixed in 7.0.0.2 CWE-434

TI-2022-04118 CVE-2022-4505 · GHSA-h7gp-f5rx-5g52

HIGH 71

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00743 Published 2022-12-15 Fixed in 7.0.0.2 CWE-639

TI-2022-04117 CVE-2022-4504 · GHSA-4293-4hgr-xmh5

HIGH 66

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00921 Published 2022-12-15 Fixed in 7.0.0.2 CWE-20

TI-2022-04116 CVE-2022-4503 · GHSA-r7r7-v9qm-wchh

HIGH 68

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00631 Published 2022-12-15 Fixed in 7.0.0.2 CWE-79

TI-2022-04115 CVE-2022-4502 · GHSA-33mh-4657-92h5

HIGH 68

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00697 Published 2022-12-15 Fixed in 7.0.0.2 CWE-79