CVE-2018-1000647: Librehealth Ehr

High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days.

LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.

Affected products

• Librehealth Librehealth Ehr: version 2.0.0 only

Published 2018-08-20. Last modified 2026-06-17.