Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and password combinations without account lockout restrictions.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2023-54347 OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the… https://www.cve.org/CVERecord?id=CVE-2023-54347
Post summary
CVE-2023-54347 is a disclosure of an authentication brute force vulnerability in OpenEMR 7.0.1 that allows attackers to bypass rate limiting by sending repeated login attempts.
🚨*CVE* CVE-2023-54347 OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the… https://www.cve.org/CVERecord?id=CVE-2023-54347 ----- Traducción: CVE-2023-54347 Ope… http://infoflow.cloud`
Post summary
The text announces CVE‑2023‑54347, noting a brute‑force authentication vulnerability in OpenEMR 7.0.1 that bypasses rate limiting; it does not mention a PoC, exploit, active exploitation, patch, or false‑positive status.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | 7.0.1 | - | - |