CVE-2019-3967: Path Traversal
In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3967?
CVE-2019-3967 has a medium severity rating as it allows authenticated attackers to exploit a directory traversal vulnerability.
How do I fix CVE-2019-3967?
To fix CVE-2019-3967, upgrade to OpenEMR version 5.0.2 or later, which addresses this vulnerability.
Who is affected by CVE-2019-3967?
Users of OpenEMR versions 5.0.1 and earlier are affected by CVE-2019-3967, particularly those with authenticated access.
What types of files can be downloaded through CVE-2019-3967?
CVE-2019-3967 allows attackers to download arbitrary files from the host system, which can lead to sensitive data exposure.
What is the nature of the vulnerability described in CVE-2019-3967?
CVE-2019-3967 is a directory traversal vulnerability that can be exploited via the patient file download interface in OpenEMR.