← All advisories

Critical severity9.8NVD Advisory· Published Jun 26, 2024· Updated Jun 17, 2026

CVE-2024-37734

CVE-2024-37734

Description

An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.

Affected products

3

Openemr/Openemr3 versions
cpe:2.3:a:open-emr:openemr:7.0.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:open-emr:openemr:7.0.2:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =7.0.2

Patches

Vulnerability mechanics

References

2

github.com/openemr/openemr/pull/7435nvdPatchVendor Advisory
github.com/A3h1nt/CVEs/tree/main/OpenEMRnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.