Threats tagged 'ghsa-vwmc-g4gv-2mf9'

OpenEMR versions before 8.4.0 have an authorization vulnerability in the prescription REST API routes. The API incorrectly checks the patients.med ACL instead of patients.rx and does not require a specific permission bit, allowing read-only Medical/History access to pass. Authenticated staff users can exploit this by reusing the UI-exposed APICSRFTOKEN to enumerate prescription UUIDs, create forged prescriptions for any patient, and deactivate prescriptions across the tenant.