Threats tagged 'ghsa-6hmf-7cr6-3763'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-124453OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows High7.12026-11-08GCVE DatabaseCVE-2026-124453 OpenEMR versions prior to 8.3.0 have an insecure direct object reference (IDOR) vulnerability in portal/lib/persist.php. This flaw allows authenticated portal patients to modify the portal settings of other patients by changing the setting_patient parameter in a JSON POST request. Such unauthorized modifications include altering another patient's portal theme settings. Report on CVE-2026-124453 Vulnerability CWE-639 #ghsa-6hmf-7cr6-3763	GCVE Database	2026-11-08

Page 1 of 1