Maciej Kazulak

Session ID leakage in Zone.Identifier of downloaded files

Authenticated RCE with uhcapache privileges in ConvertToPDF

SQL injection in getPatientIdentifier function of PatientService.pl

Authenticated SQL injection in PrepareCDExportJSON.pl

Missing authentication in API returning a list of all active sessions

SQL injection in ReturnUserUnitsXML.pl via the UserID parameter

SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter

Excessive permissions on configuration files containing database logins and passwords

Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

Missing authentication in API returning request logs containing session IDs