Imaworldhealth Bhima
3 CVEs affecting Imaworldhealth Bhima. Latest disclosed: 2023-04-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0967 | Medium | 6.5 | 2023-04-05 | Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of other application users and data that should only… |
CVE-2023-0959 | Medium | 6.5 | 2023-04-05 | Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the application via a malicious link sent to an administrat… |
CVE-2023-0944 | Medium | 4.3 | 2023-04-05 | Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password… |