Beveiligingsadvies

CVE-2026-44715

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-11 21:19:00
Laatst bijgewerkt 2026-09-15 16:42:38
Toegewezen door GitHub_M
CVSS-score 8.7
Status PUBLISHED

Beschrijving

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.