CVE-2020-11437: Librehealth Ehr

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.

Affected products

• Librehealth Librehealth Ehr: version 2.0.0 only

Published 2020-07-15. Last modified 2026-06-17.