← Database

CVE-2022-25471

HIGH CVSS: 8.1 Published: 2022-03-03 Modified: 2026-06-17

Description

An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register.

Affected Platforms

Open-Emr Openemr

Weakness Type

CWE-639

References