CVE:CVE-2020-11438
CNNVD:CNNVD-202007-1104
LibreHealth EMR是LibreHealth开源的一款电子病历。
LibreHealth EMR 2.0.0版本中存在跨站请求伪造漏洞。攻击者利用该漏洞执行跨站请求伪造攻击。
solution:Upgrade librehealth librehealth_ehr to a higher version than 2.0.0,and avoid the version 2.0.0