Threats tagged 'ghsa-fpm7-mpc8-73jg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-126485OpenEMR before 8.5.0 contains a cross-site request forgery vulnerability in ObservationController::deleteAction that Medium5.32026-11-13GCVE DatabaseCVE-2026-126485 OpenEMR versions prior to 8.5.0 have a cross-site request forgery (CSRF) vulnerability in the ObservationController::deleteAction. This flaw allows attackers to trick authenticated clinicians into unintentionally deleting observation form records by sending a crafted GET request without requiring a CSRF token. Report on CVE-2026-126485 Vulnerability CWE-352 #ghsa-fpm7-mpc8-73jg	GCVE Database	2026-11-13

Page 1 of 1