LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.Referenceshttps://github.com/LibreHealthIO/lh-ehr/issues/1212https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/
