CVE-2020-11437

CVE-2020-11437

EPSS 0.9%

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://know.bishopfox.com/advisories https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0 https://librehealth.io/