coldbraid

CVE-2023-43208 NextGen Healthcare Mirth Connect

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

CVSS
not scored

CWE-502

On CISA’s exploited list

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

Added
2024-05-20
Federal patch deadline
2024-06-10
Ransomware use
known