Descripción
NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see github.com/nextgenhealthcare/connect/wiki/4.4.1---What%27s-New
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2023-43208