PT-2022-13905 · Openemr · Openemr

Published 2022-04-25 · Updated 2022-05-04 · CVE-2022-1461

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.1.0.1

Description A non-privileged user can enable or disable registration in the GitHub repository openemr/openemr.

Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later to resolve the issue.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-1220

CWE-639

Related Identifiers

CVE-2022-1461

Affected Products

Openemr

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1461.json · Exploit
• 🔥 https://huntr.dev/bounties/690a8ec5-64fc-4180-9f1f-c3c599bae0a9 · Exploit
• https://github.com/openemr/openemr/commit/3af1f4a28a8df0e446043232214ed08cc8e0889d · Patch
• https://osv.dev/vulnerability/CVE-2022-1461 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1461 · Security Note