CVE Intelligence

Vulnerabilidades do Openmrs Org.openmrs.module:legacyui-api

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Openmrs Org.openmrs.module:legacyui-api: 1 registro(s), com versões afetadas e correções.

CVE-2026-44715 Alta · 8.7 CWE-285 11/09/2026
OpenMRS has Broken Access Control in HL7 Configuration
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.