CVE-2022-22854

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0

Description The issue is related to an access control problem in the hprms/admin/?page=user/list endpoint of the Hospital Patient Record Management System, allowing attackers to escalate privileges by accessing and editing the user list.

Recommendations For Hospital Patient Record Management System version 1.0, consider restricting access to the hprms/admin/?page=user/list endpoint until a patch is available. As a temporary workaround, limit the ability to edit the user list to authorized personnel only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.