CVE Intelligence

Openmrs Org.openmrs.module:legacyui-api vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Openmrs Org.openmrs.module:legacyui-api: 1 record(s), with affected versions and fixes.

CVE-2026-44715 High · 8.7 CWE-285 Sep 11, 2026
OpenMRS has Broken Access Control in HL7 Configuration
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.