Threats tagged 'ghsa-h78g-9g6c-wm8r'

OpenEMR versions prior to 8.5.0 contain a path traversal vulnerability in the era_payments.php and sl_eob_search.php scripts. This flaw allows authenticated billing users to write files outside the intended ERA directory by embedding traversal sequences in the GS04 element of uploaded X12 835 files. Successful exploitation can overwrite .edi or .835 files anywhere writable by the web server, potentially leading to integrity and availability impacts.