| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | < 5.0.1.4 | 5.0.1.4 |
Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free