CVE-2019-17197: SQL Injection
Published Oct 5, 2019
·Updated
OpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library/clinicalrules.php that affects library/patient.inc.
Affected Software
1 affected component
open-emr Openemr<=5.0.2
Remediation
Patch Available
Event History
Oct 5, 2019
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-17197?
CVE-2019-17197 is classified as a medium severity SQL Injection vulnerability.
2
How do I fix CVE-2019-17197?
To fix CVE-2019-17197, update OpenEMR to a version later than 5.0.2 that addresses the SQL injection issue.
3
What versions of OpenEMR are affected by CVE-2019-17197?
OpenEMR versions up to and including 5.0.2 are affected by CVE-2019-17197.
4
What kind of attack does CVE-2019-17197 facilitate?
CVE-2019-17197 facilitates SQL Injection attacks through the Lifestyle demographic filter criteria.
5
Which files are involved in CVE-2019-17197?
CVE-2019-17197 involves the library/clinical_rules.php and library/patient.inc files.