CVE-2022-31497

Description

References

• LibreHealthIO/lh-ehr · Release Notes
• gitlab.com/librehealth/ehr/lh-ehr/-/tags · Release Notes
• nitroteam.kz/index.php · Third Party Advisory

librehealth ehr 的其他漏洞

• CVE-2022-31496高危 8.8LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
• CVE-2022-31495中危 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
• CVE-2022-31494中危 6.1LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
• CVE-2022-31498中危 6.1LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
• CVE-2022-31492中危 6.1Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.