Stored XSS in OpenEMR Patient External ID Field

Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in OpenEMR versions before 8.5.0. Authenticated users can inject malicious scripts by entering payloads into the patient External ID field. The script executes when other users view the patient's prescriptions via the 'View Printable Version (HTML)' feature, running in their browsers.

Useful 0 Not Useful 0

Detection Guidance

Check OpenEMR versions below 8.5.0 for stored XSS via patient External ID field. Inspect patient records for suspicious scripts in External ID fields. Monitor network traffic for unauthorized script executions when viewing prescriptions in HTML format.

Useful 0 Not Useful 0

Impact Analysis

An attacker could steal session cookies, redirect users to malicious sites, or perform actions on behalf of users. Users accessing prescriptions of a compromised patient may have their browser sessions hijacked or sensitive data exposed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to patient data, violating confidentiality requirements under HIPAA and GDPR. It may result in data breaches, triggering mandatory breach notifications and potential fines.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEMR to version 8.5.0 or later immediately. Remove or sanitize any malicious scripts in patient External ID fields. Restrict user permissions to prevent unauthorized modifications. Monitor for unusual activity in prescription views.

Useful 0 Not Useful 0