Threats tagged 'ghsa-grff-556r-q8w3'

OpenEMR versions prior to 8.5.0 contain an SQL injection vulnerability in the CcrTable::insertApprovedData() function. This flaw allows authenticated users to inject SQL via request parameter names used as column names. Exploitation involves sending crafted patient_data-*-sel parameters to the revandapprove route, which lacks access control and CSRF protections. Attackers can manipulate patient records, including copying password hashes into patient fields or corrupting data.