GHSA-hvp7-q2hp-6j6g: OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignment
OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteDocumentController::Query() that allows authenticated portal patients to read other patients' documents by overriding PidEquals criteria. Attackers can supply PidEquals, PidGreaterThan, or PidIn request parameters to the onsitedocuments API to retrieve signed consent forms, signatures, and PHI of any patient.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated portal patient can exploit it. The attacker does not need user interaction and can access the vulnerable API remotely.
What data could be exposed?
An attacker may retrieve other patients' documents through the onsitedocuments API, including signed consent forms, signatures, and protected health information (PHI).
What request parameters are involved in exploitation?
The vulnerable query can be manipulated with Pid_Equals, Pid_GreaterThan, or Pid_In parameters to override patient-ID filtering.
Which OpenEMR versions are affected?
OpenEMR versions before 8.3.0 are affected.