CVE-2022-31497

概要

参考情報

• LibreHealthIO/lh-ehr · Release Notes
• gitlab.com/librehealth/ehr/lh-ehr/-/tags · Release Notes
• nitroteam.kz/index.php · Third Party Advisory

librehealth ehr のその他の脆弱性

• CVE-2022-31496高 8.8LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
• CVE-2022-31495中 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
• CVE-2022-31494中 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
• CVE-2022-31498中 6.1LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
• CVE-2022-31492中 6.1Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.