OpenHealth vulnerabilities
1 known vulnerability in OpenHealth from OpenHealthForAll. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
OpenHealth: Missing Authentication for Critical Functionality
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData