Privilege Escalation Vulnerability in OpenEMR by OpenEMR Team

CVE-2024-26476

What is CVE-2024-26476?

A vulnerability exists in OpenEMR versions prior to 7.0.2, where a remote attacker can exploit the ereq_form.php component. By crafting a malicious script targeting the formid parameter, the attacker is able to escalate their privileges, potentially leading to unauthorized access and control over sensitive information.

References