CVE-2023-2674: Improper Access Control in openemr/openemr
Published May 12, 2023
·Updated
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
Affected Software
1 affected component
open-emr Openemr<7.0.1
Remediation
Event History
May 12, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-2674?
CVE-2023-2674 is a vulnerability related to improper access control in the GitHub repository openemr/openemr prior to version 7.0.1.
2
What software is affected by CVE-2023-2674?
The Open-emr Openemr software version up to and excluding 7.0.1 is affected by CVE-2023-2674.
3
What is the severity of CVE-2023-2674?
CVE-2023-2674 has a severity rating of high with a CVSS score of 4.3.
4
How can I fix CVE-2023-2674?
To fix CVE-2023-2674, it is recommended to update the openemr/openemr repository to version 7.0.1 or later.
5
Where can I find more information about CVE-2023-2674?
More information about CVE-2023-2674 can be found at the following references: [GitHub Commit](https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9), [Huntr Bounty](https://huntr.dev/bounties/af73e913-730c-4245-88ce-26fc908d3644).