CVE-2022-2824: Authorization Bypass Through User-Controlled Key in openemr/openemr
Published Aug 15, 2022
·Updated
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
Affected Software
1 affected component
open-emr Openemr<7.0.0.1
Remediation
Event History
Aug 15, 2022
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-2824?
CVE-2022-2824 is a vulnerability that allows an attacker to bypass authorization by using a user-controlled key in the GitHub repository openemr/openemr prior to version 7.0.0.1.
2
What software is affected by CVE-2022-2824?
Open-emr Openemr versions up to 7.0.0.1 are affected by CVE-2022-2824.
3
What is the severity of CVE-2022-2824?
The severity of CVE-2022-2824 is high with a CVSS score of 5.4.
4
How can an attacker exploit CVE-2022-2824?
An attacker can exploit CVE-2022-2824 by using a user-controlled key to bypass authorization in the openemr/openemr GitHub repository.
5
Is there a fix for CVE-2022-2824?
Yes, updating to version 7.0.0.1 or later of Open-emr Openemr resolves the vulnerability.