CVE-2020-11439: Librehealth Ehr

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application.

Affected products

• Librehealth Librehealth Ehr: version 2.0.0 only

Published 2020-07-15. Last modified 2026-06-17.