CVE-2023-22973

A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname…

published February 22, 2023

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01812 · 78.5th percentile
Published
2023-02-22T00:00Z
EPSS history
Timeline
  • 22 FEB 00:00Z
    A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname…
    cvelistv5