Threats tagged 'ghsa-xj63-9399-3j6q'

OpenEMR versions prior to 8.4.0 have a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated attackers to register an OAuth2 client with an unvalidated jwks_uri, enabling the server to send arbitrary HTTP requests. Attackers can exploit this via the token introspection endpoint using an unsigned client_assertion to probe internal services and access cloud metadata endpoints.