high8.1
CVE-2025-35030
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrativ…
Impact
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mieweb | Enterprise Health | Versions rc202303, rc202309, rc202403, rc202409, rc202503 |