CVE-2026-126430OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Field Names

Açıklama

OpenEMR before 8.5.0 contains an sql injection vulnerability that allows any authenticated core user to inject SQL by supplying crafted patient_data field names to the CCR revandapprove controller. Attackers can embed scalar subqueries in the UPDATE patient_data SET clause to read staff password hashes and portal reset values, alter arbitrary patient demographics, and take over patient-portal accounts.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• GitHub Security Advisory (GHSA-wh28-4qcg-5hcc) vendor-advisory
• VulnCheck Advisory: OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Field Names third-party-advisory