org.openmrs.module:legacyui-api vulnerabilities
1 known vulnerability in org.openmrs.module:legacyui-api from OpenMRS. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
org.openmrs.module:legacyui-api: Improper Authorization
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restrict