PT-2020-12608 · Librehealthio · Librehealth Emr

Chris Davis · Published 2020-07-15 · Updated 2021-07-21 · CVE-2020-11439

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreHealth EMR version 2.0.0

Description The issue allows for Local File Inclusion, enabling the inclusion and execution of arbitrary PHP code within the application.

Recommendations For LibreHealth EMR version 2.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-11439

Affected Products

Librehealth Emr

References · 6

• 🔥 https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0 · Exploit
• https://librehealth.io · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11439 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11439 · Vendor Advisory
• https://know.bishopfox.com/advisories · Note
• https://t.me/cvenotify/5070 · Telegram Post