Missing Authorization in OpenEMR - #VU158836

Vulnerability details

The vulnerability allows a remote user to electronically sign another patient's clinical form without authorization and prevent ordinary editing through the chart interface.

The vulnerability exists due to missing authorization checks in OpenEMR's electronic-signature handler in library/ESign/Form/Controller.php when processing form-signing requests. A remote user can submit a request to /interface/esign/index.php with a target form ID, form directory, encounter ID, and the account's own password to persist an unauthorized signature and an arbitrary amendment on the selected form, locking it in the normal chart interface under the default settings.

Affected software

Remediation

External References

• https://github.com/openemr/openemr/security/advisories/GHSA-6x2w-9gwv-mc7v

Related Security Bulletins

• Multiple vulnerabilities in OpenEMR