CVE-2021-32104

Description

References

• blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability · Third Party Advisory
• community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431 · Vendor Advisory
• community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592 · Third Party Advisory
• portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal · Third Party Advisory
• open-emr.org/wiki/index.php/Old_Outdated_OpenEMR_Patches · Patch

Weitere Schwachstellen in openemr

• CVE-2026-67611HOCH 8.1OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-facto…
• CVE-2026-39932KRITISCH 9.1OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php…
• CVE-2026-39931HOCH 7.2OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administr…
• CVE-2026-46518HOCH 8.7OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored …
• CVE-2023-54347HOCH 7.5OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repe…