PT-2023-1419 · Unknown · Nosh Chartingsystem

Charalampos Theodorou · Published 2023-02-01 · Updated 2023-02-08 · CVE-2023-24610

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NOSH version 4a5cfdb

Description The issue allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed, potentially enabling attackers to steal Protected Health Information due to the product's purpose for health charting. This is related to an unlimited file upload vulnerability in the Organization/Practice module of the New Open Source Health (NOSH) ChartingSystem, which can allow a remote attacker to execute arbitrary code and gain full control over the system.

Recommendations For NOSH version 4a5cfdb, consider disabling the "practice logo" upload feature until a patch is available to prevent the execution of arbitrary PHP code. Restrict access to the file upload functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-00807

CVE-2023-24610

Affected Products

Nosh Chartingsystem

References · 9

• 🔥 https://github.com/abbisQQ/CVE-2023-24610 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-24610 · Security Note
• https://bdu.fstec.ru/vul/2023-00807 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24610 · Vendor Advisory
• https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533 · Note
• https://github.com/shihjay2/docker-nosh · Note
• https://gist.github.com/abbisQQ/d8392acf7e02003e73af973cc9f5f54a · Note
• https://t.me/cibsecurity/57298 · Telegram Post
• https://noshemr.wordpress.com · Note