CVE-2018-1000647

Published August 20th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5.5

MEDIUM

Affected

PROJECT

Description

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.

LibreHealthIO/lh-ehr

LibreHealth EHR - Free Open Source Electronic Health Records

GitHub

296