Unscored CVE-2018-1000646 EUVD-2018-1977GHSA-7r99-hmw7-fvpw

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result i…

Published Aug 20, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution.

References

https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write/
https://github.com/LibreHealthIO/lh-ehr/issues/1211