CVE-2024-26476: SSRF
Published Feb 28, 2024
·Updated
An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereqform.php component.
Affected Software
2 affected components
OpenEMR OpenEMR<7.0.2
open-emr Openemr<7.0.2
Event History
Feb 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-26476?
CVE-2024-26476 is classified as a critical vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-26476?
To mitigate CVE-2024-26476, you should upgrade OpenEMR to version 7.0.2 or later.
3
Who is affected by CVE-2024-26476?
CVE-2024-26476 affects all versions of OpenEMR prior to 7.0.2.
4
What type of attack is associated with CVE-2024-26476?
CVE-2024-26476 is associated with a remote privilege escalation attack through a crafted script.
5
What component is impacted by CVE-2024-26476?
CVE-2024-26476 impacts the ereq_form.php component of OpenEMR.