Threats tagged 'ghsa-cgxm-9969-q9j6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-124484OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any High8.72026-11-08GCVE DatabaseCVE-2026-124484 OpenEMR versions prior to 8.4.0 have a missing authorization vulnerability in the portal onsite-document APIs. This flaw allows any authenticated core user to access, list, read, and overwrite documents belonging to other patients by omitting the patientId parameter and supplying arbitrary record IDs. The vulnerability affects patient portal documents, signatures, and template data. Report on CVE-2026-124484 Vulnerability CWE-862 #ghsa-cgxm-9969-q9j6	GCVE Database	2026-11-08

Page 1 of 1