Description
OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.write scope to read, modify, and create Patient records.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openemr | openemr | < 8.4.0 | 8.4.0 |
References
- GitHub Security Advisory (GHSA-6xh3-fmm5-jjp4) vendor-advisory
- VulnCheck Advisory: OpenEMR before 8.4.0 OAuth Authorization Bypass via Scope Canonicalization third-party-advisory