Threats tagged 'ghsa-r67g-7xmv-5q36'

OpenEMR versions prior to 8.4.0 have an improper authorization vulnerability in the Rainforest patient portal payments. The vulnerability arises because the system trusts browser-supplied patientId, encounter, and amount values instead of deriving them securely from the portal session. Authenticated patients can manipulate JSON data sent to portal_payment.rainforest.php, causing the payin.authorized webhook to write forged activity credits to other patients' encounters, potentially exceeding the actual payment amount.