Threats tagged 'ghsa-8x5g-229c-9c6h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-124464OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows patient-scoped SMART tokens to read High7.12026-11-08GCVE DatabaseCVE-2026-124464 OpenEMR versions before 8.4.0 have an authorization bypass vulnerability allowing patient-scoped SMART tokens to access other patients' questionnaire responses. This occurs because the FhirQuestionnaireResponseService does not implement the required IPatientCompartmentResourceService, enabling unauthorized read access to clinical assessment data. Report on CVE-2026-124464 Vulnerability CWE-639 #ghsa-8x5g-229c-9c6h	GCVE Database	2026-11-08

Page 1 of 1