CVE-2021-40352

OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users

published September 1, 2021

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09709 · 95.5th percentile
Published
2021-09-01T12:20Z
EPSS history
Timeline
  • 01 SEP 12:20Z
    OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users
    cvelistv5