Improper access control in OpenEMR - #VU158839

Vulnerability details

The vulnerability allows a remote user to falsify the reviewed state of another patient's allergy, medication, or medical-problem list.

The vulnerability exists due to improper access control in OpenEMR's library/ajax/lists_touch.php endpoint when processing submitted patient identifiers and clinical-list types. A remote user can submit a POST request with a valid session and CSRF token, a target patient identifier, and a list type to mark an unreviewed empty list as "None" without the required issue-write permission or patient access, also affecting quality-measure and summary-of-care calculations that rely on the marker.

Affected software

Remediation

External References

• https://github.com/openemr/openemr/security/advisories/GHSA-924r-c6jp-67px

Related Security Bulletins

• Multiple vulnerabilities in OpenEMR