CVE-2022-31498

Description

References

• LibreHealthIO/lh-ehr · Release Notes
• gitlab.com/librehealth/ehr/lh-ehr/-/tags · Release Notes
• nitroteam.kz/index.php · Exploit

librehealth ehr의 다른 취약점

• CVE-2022-31496높음 8.8LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
• CVE-2022-31497보통 6.1LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
• CVE-2022-31495보통 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
• CVE-2022-31494보통 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
• CVE-2022-31492보통 6.1Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.