← All advisories

Critical severity9.0NVD Advisory· Published Jul 15, 2020· Updated Jun 17, 2026

CVE-2020-11436

CVE-2020-11436

Description

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

LibreHealth/Librehealth Ehr2 versions
cpe:2.3:a:librehealth:librehealth_ehr:2.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:librehealth:librehealth_ehr:2.0.0:*:*:*:*:*:*:*
- (no CPE)range: =2.0.0
LibreHealth/EMRdescription

Patches

Vulnerability mechanics

References

3

labs.bishopfox.com/advisories/librehealth-version-2.0.0-0nvdExploitThird Party Advisory
know.bishopfox.com/advisoriesnvdThird Party Advisory
librehealth.ionvdVendor Advisory

News mentions

0

No linked articles in our index yet.