CVE-2018-25096

HOCH 8.8CVE-2018-25096 · Published 30/12/2023 · updated 17/06/2026

Kurz gesagt

CVE-2018-25096 ist eine Schwachstelle (HOCH (CVSS 8.8)) in ownhealthrecord (petrk94).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.32%, höher als bei 24.5% aller Schwachstellen.
Abhilfe: auf 0.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
ownhealthrecord petrk94	`< 0.4`	`0.4`

Description

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

References

MdAlAmin-aol/ownhealthrecord commit 58b413a · Patch
MdAlAmin-aol/ownhealthrecord release v0.4-alpha · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free