| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | < 5.0.1.4 | 5.0.1.4 |
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free