Threats tagged 'ghsa-m965-q963-p5wc'

OpenEMR versions prior to 8.3.0 have an insecure direct object reference vulnerability in portal/lib/paylib.php. This flaw allows authenticated portal patients to manipulate payment audit records of other patients by submitting crafted requests that alter billing records without proper session validation.