Unscored CVE-2018-1000647 EUVD-2018-1978GHSA-gh97-3pmc-4q84

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result…

Published Aug 20, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.

References

https://github.com/LibreHealthIO/lh-ehr/issues/1212
https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/