| Package | Affected versions | Patched versions |
|---|---|---|
| openemr | = 5.0.0 |
The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free