Description (CNA)
LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write/
- https://github.com/LibreHealthIO/lh-ehr/issues/1211
ADP enrichment
No English description supplied.