Detections
Analytics
CVE-2026-104134
medium
Description
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, the search_persons action in library/ajax/person_search_ajax.php validates CSRF but does not perform an AclMain authorization check before searching the person and patient_data tables. A low-privilege authenticated user can iterate name prefixes and receive patient first and last names, dates of birth, gender, phone numbers, and email addresses in JSON responses. This issue is fixed in version 8.3.0.
References
https://github.com/openemr/openemr/security/advisories/GHSA-xhfm-5pwg-3cxv
https://github.com/openemr/openemr/releases/tag/v8_3_0
https://github.com/openemr/openemr/pull/13200
https://github.com/openemr/openemr/commit/7973cab3fe3f2fd2374ed71c02605e3c93491c36