OpenEMR is a free and open source electronic health records and medical practice management application. Starting in version 7.0.2.1 and prior to version 8.0.0.3, a reflected cross-site scripting (XSS) vulnerability in the custom template editor allows an attacker to execute arbitrary JavaScript in an authenticated staff member's browser session by sending them a crafted URL. The attacker does not need an OpenEMR account.
Version 8.0.0.3 patches the issue.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Open-Emr Openemr
cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*
|
7.0.2.1
|
8.0.0.3
|
References 4
https://github.com/openemr/openemr/commit/d5c8d49ef19983472b2d7db0dbebd2dac9d6a…
security-advisories@github.com
https://github.com/openemr/openemr/commit/de9b6eb0da574430e8223c014cf4a05b0adc2…
security-advisories@github.com
https://github.com/openemr/openemr/releases/tag/v8_0_0_3
security-advisories@github.com
https://github.com/openemr/openemr/security/advisories/GHSA-9qh7-cfq4-j7c3
security-advisories@github.com