| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | ≥ 5.0.0, ≤ 6.0.0.1 |
In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user is aware of the first 72 characters of the victim user’s password, he can leverage it to an account takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free