https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T06:52:48.505212+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124472 CVE-2026-124472 — OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php 2026-11-12T06:52:48.506164+00:00

Affected: openemr

OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_patient_note.php that allows any authenticated user to read and modify patient billing notes. Attackers with low-privilege accounts can enumerate the patient_id parameter and submit POST requests using the embedded CSRF token to view or tamper with confidential billing data.