OpenEMR Vulnerabilities Endanger Patient Information

FortiGuard Labs is aware of a report that OpenEMR (Electronic Medical Records) released a patch for three vulnerabilities on November 30, 2022, two of which can be chained for remote code execution. Since OpenEMR is used to digitally manage health records of patient and supports electronic billing, successful exploitation can result in a confidential data leak.Why is this Significant?This is significant because approximately 100,000 healthcare institutions reportedly use OpenEMR to manage 200 million patients. Failing to update OpenEMR to the …

aware billing code code execution confidential data data leak exploitation health healthcare information institutions labs leak manage medical november openemr patch patients remote code remote code execution report result vulnerabilities