CVE-2020-13569: CSRF

Published Jan 28, 2021

Updated

A cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce). A specially crafted HTTP request can lead to the execution of arbitrary requests in the context of the victim. An attacker can send an HTTP request to trigger this vulnerability.

Affected Software

1 affected component

open-emr Openemr=5.0.2

Event History

Jan 28, 2021

CVE Published

via MITRE·12:28 PM

Data Sourced

via MITRE·12:28 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-13569?

CVE-2020-13569 is considered a medium severity vulnerability.

How do I fix CVE-2020-13569?

To fix CVE-2020-13569, upgrade OpenEMR to version 6.0.0 or later that addresses this vulnerability.

What systems are affected by CVE-2020-13569?

CVE-2020-13569 affects OpenEMR version 5.0.2 and the development version 6.0.0.

What type of vulnerability is CVE-2020-13569?

CVE-2020-13569 is a cross-site request forgery (CSRF) vulnerability.

What could an attacker achieve with CVE-2020-13569?

An attacker exploiting CVE-2020-13569 could execute arbitrary requests in the context of the victim.