CVE-2019-14530

This exploit leverages a path traversal vulnerability in OpenEMR's custom/ajax_download.php via the fileName parameter, allowing authenticated attackers to read arbitrary files on the server. The script authenticates with provided credentials and constructs a malicious URL to retrieve the specified file.

This repository contains a functional Ruby exploit for CVE-2019-14530, an authenticated path traversal vulnerability in OpenEMR versions prior to 5.0.2. The exploit leverages a vulnerable endpoint to read arbitrary files on the server, demonstrated by reading /etc/passwd.

This repository provides a detailed technical analysis of CVE-2019-14530, a path traversal and DoS vulnerability in OpenEMR. It explains the vulnerable function, conditions for exploitation, and the impact of the vulnerability, including information disclosure and denial of service.