Threats tagged 'ghsa-8f4f-4mrm-hgrg'

OpenEMR versions prior to 8.5.0 contain an authorization bypass vulnerability that allows authenticated users to override system-wide global configuration settings. This is achieved by submitting global-prefixed keys via a specific endpoint, enabling attackers to disable audit logging, weaken password policies, or alter other security-sensitive settings persistently for their sessions.