NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
NextGen Healthcare · Mirth Connect
Date added (CISA)
2024-05-20
Remediation due
2024-06-10
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.