← All advisories

Medium severity4.3NVD Advisory· Published Jul 15, 2020· Updated Jun 17, 2026

CVE-2020-11437

CVE-2020-11437

Description

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

LibreHealth/Librehealth Ehr2 versions
cpe:2.3:a:librehealth:librehealth_ehr:2.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:librehealth:librehealth_ehr:2.0.0:*:*:*:*:*:*:*
- (no CPE)range: =2.0.0
LibreHealth/EMRdescription

Patches

Vulnerability mechanics

References

3

labs.bishopfox.com/advisories/librehealth-version-2.0.0-0nvdExploitThird Party Advisory
know.bishopfox.com/advisoriesnvdThird Party Advisory
librehealth.ionvdVendor Advisory

News mentions

0

No linked articles in our index yet.