Tag
OpenEMR versions prior to 8.4.0 contain an incorrect authorization flaw in the prescription REST API, allowing authenticated staff to forge or deactivate patient prescriptions.