Threats tagged 'ghsa-p5cj-hhx3-3982'

OpenEMR versions prior to 8.5.0 contain a second-order SQL injection vulnerability that allows low-privileged authenticated users to inject malicious SQL code. The vulnerability arises from the ability to store a SQL fragment in the recent_patient_columns option_id value via library/ajax/addlistitem.php, which is later concatenated and executed in dynamic_finder.php. This flaw can lead to high confidentiality impact by exposing sensitive data.