OpenMRS FHIR2 Module Privilege Escalation Vulnerability

A vulnerability exists in the OpenMRS FHIR2 module, specifically in versions prior to 2.5.0, where privilege checks were not consistently enforced. This flaw could have allowed unauthorized users to add or modify data inappropriately.

Impact

Exploitation of this vulnerability could lead to unauthorized data modification or addition by users without the necessary privileges.

Remediation

Users are advised to update to OpenMRS FHIR2 Module version 2.5.0 or later as soon as possible.