Summary
OpenEMR's Rainforest payment integration trusted patient and encounter amounts supplied by an authenticated portal user. The payment webhook could then record an inflated credit against another patient's bill without matching that credit to the amount actually paid. Affects versions before 8.4.0; fixed in 8.4.0.
Disclosure timeline
- Public disclosure
Credits
Reported by christos-cantina-security, as credited in OpenEMR's advisory.