CVEvulnerability
CVE-2018-1000648
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters.
Affected configurations
• librehealth librehealth ehr 2.0.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP/ Exploit, Third Party Advisory
- https://github.com/LibreHealthIO/lh-ehr/issues/1213 Exploit, Third Party Advisory
- https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP/ Exploit, Third Party Advisory
- https://github.com/LibreHealthIO/lh-ehr/issues/1213 Exploit, Third Party Advisory