CyberRota Analysis
AI-GeneratedOpenEMR versions prior to 8.3.0 are vulnerable to a path traversal flaw in the EDI archive restore function, allowing authenticated users with EOB Data Entry permissions to exploit unsanitized input in the archrestore_sel POST parameter. This vulnerability enables attackers to probe the server's filesystem, potentially exposing sensitive file existence information. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access to filesystem data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST parameter is passed to the archive restore handler without sanitization for path traversal sequences. The handler checks whether the supplied path exists on the filesystem, and the differing response messages leak whether the target path exists. An authenticated user with EOB Data Entry permissions can probe arbitrary filesystem paths on the server to determine file existence.