PT-2022-19922 · Unknown · Librehealth Emr

Manfromkz · Published 2022-05-05 · Updated 2022-05-12 · CVE-2022-29938

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0

Description The issue is related to a lack of sanitization of the payment id parameter in the interfacebilling ew payment.php file via interfacebillingpayment master.inc.php, which leads to SQL injection.

Recommendations For LibreHealth EHR version 2.0.0, consider disabling access to the interfacebilling ew payment.php file until a patch is available to prevent SQL injection via the payment id parameter. Restrict access to the interfacebillingpayment master.inc.php file to minimize the risk of exploitation. Avoid using the payment id parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-29938

Affected Products

Librehealth Emr

References · 7

• 🔥 https://nitroteam.kz/index.php?action=researches&slug=librehealth_r · Exploit
• https://osv.dev/vulnerability/CVE-2022-29938 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29938 · Security Note
• https://github.com/LibreHealthIO/lh-ehr/tags · Note
• https://t.me/cvenotify/29726 · Telegram Post
• https://gitlab.com/librehealth/ehr/lh-ehr/-/tags · Note
• https://t.me/cibsecurity/41981 · Telegram Post