Vulnerabilities > Open EMR > Openemr > 7.0.0.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-08 CVE-2023-2566 Cross-site Scripting vulnerability in Open-Emr Openemr
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.
network
low complexity
open-emr CWE-79
4.8
2022-12-15 CVE-2022-4505 Authorization Bypass Through User-Controlled Key vulnerability in Open-Emr Openemr
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2.
network
low complexity
open-emr CWE-639
4.3
2022-12-15 CVE-2022-4506 Unrestricted Upload of File with Dangerous Type vulnerability in Open-Emr Openemr
Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2.
network
low complexity
open-emr CWE-434
8.8