Librehealth
22 known vulnerabilities
Top Products
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Us
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_p
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via
interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerabilit
LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed wi
LibreHealth EMR v2.0.0 is affected by systemic CSRF.
LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database
LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other us
LH-EHR version REL-2_0_0 contains a Arbitrary File Upload vulnerability in Profile picture upload that can result in Rem
LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions t
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file le
LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import templ
LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import templat
LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of te
Frequently Asked Questions
How many CVEs affect Librehealth?
Librehealth has 22 CVE records in our database, including 1 critical and 11 high severity vulnerabilities.
What are the most severe Librehealth vulnerabilities?
Librehealth has 1 critical severity (CVSS 9.0+) and 11 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Librehealth vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Librehealth products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Librehealth Vulnerabilities
CyberStrike scans your infrastructure for Librehealth vulnerabilities and provides real-time remediation guidance.
Get Started