CVE-2023-2945 – Missing Authorization in openemr/openemr
https://notcve.org/view.php?id=CVE-2023-2945
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/3656bc88288957d68ba040cad2e5f9dbd1b607b1 https://huntr.dev/bounties/62de71bd-333d-4593-91a5-534ef7f0c435 • CWE-862: Missing Authorization •
CVE-2023-2942 – Improper Input Validation in openemr/openemr
https://notcve.org/view.php?id=CVE-2023-2942
Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9 https://huntr.dev/bounties/dd56e7a0-9dff-48fc-bc59-9a22d91869eb • CWE-20: Improper Input Validation •
CVE-2023-2943 – Code Injection in openemr/openemr
https://notcve.org/view.php?id=CVE-2023-2943
Code Injection in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9 https://huntr.dev/bounties/4190f944-dc2c-4624-9abf-31479456faa9 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVE-2023-2946 – Improper Access Control in openemr/openemr
https://notcve.org/view.php?id=CVE-2023-2946
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/81832acc14207e577e76c4175967c99ae7e3d3f4 https://huntr.dev/bounties/e550f4b0-945c-4886-af7f-ee0dc30b2a08 • CWE-284: Improper Access Control •
CVE-2023-2674 – Improper Access Control in openemr/openemr
https://notcve.org/view.php?id=CVE-2023-2674
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. • https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9 https://huntr.dev/bounties/af73e913-730c-4245-88ce-26fc908d3644 • CWE-284: Improper Access Control •