Description (CNA)
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/LibreHealthIO/lh-ehr/issues/1212
- https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/
ADP enrichment
No English description supplied.