Difference between revisions of "Critical Security Fix for OpenEMR setup.php"

From OpenEMR Project Wiki
Line 13: Line 13:


== OpenEMR Community Response ==
== OpenEMR Community Response ==
:
:OpenEMR is an open source project that is worked on by many folks around the world. Security is taken very seriously and both of the above vulnerabilities were fix and patches were  announced within several says of initial contact by the security firms.

Revision as of 06:41, 30 November 2017

Overview

In November of 2017, there were 2 critical security vulnerabilities reported in OpenEMR before 5.0.0 Patch 5 .

Secure Your OpenEMR

In order to protect yourself from this vulnerability:
  • If using OpenEMR 5.0.0:
  1. Update to the most recent patch via following instructions: OpenEMR Patches
  2. Remove the setup.php file from the openemr web directory (if you need this file in the future, then can download it at setup.php).
  • If using OpenEMR 4.2.2 or lower:
  1. Remove the setup.php file from the openemr web directory.

OpenEMR Community Response

OpenEMR is an open source project that is worked on by many folks around the world. Security is taken very seriously and both of the above vulnerabilities were fix and patches were announced within several says of initial contact by the security firms.