Description
OpenEMR before 8.5.0 contains multiple missing authorization and SQL injection defects across report, portal, transaction, and immunization components. Low-privileged Front Office clerks can chain these to read arbitrary database tables including users_secure hashes, hijack patient portal identities, and forge approved clinical records.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openemr | openemr | < 8.5.0 | 8.5.0 |
References
- GitHub Security Advisory (GHSA-vr7f-7c3w-49g7) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenEMR before 8.5.0 Privilege Escalation via Missing Authorization and SQL Injection third-party-advisory