Remote Code Execution Vulnerability in OpenEMR by OpenEMR Community
CVE-2019-8371

7.2HIGH

Key Information:

Vendor

Open-emr

Status
Openemr
Vendor
CVE Published:
16 September 2019

What is CVE-2019-8371?

OpenEMR versions 5.0.1 to 5.0.6 are susceptible to a remote code execution vulnerability that allows unauthorized users to execute arbitrary code on the server. This security issue arises due to inadequate input validation, which can be exploited by an attacker to gain control over the affected system, potentially compromising sensitive data and the integrity of the application. Users are strongly encouraged to apply available patches and upgrade to secure versions to mitigate this risk.

References

https://know.bishopfox.com/advisories/openemr-5-0-16-remo...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.