These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A CVE record describes a low-severity vulnerability in SmileCDR HAPI FHIR servers with REST-hook subscriptions enabled. An attacker with subscription-creation permissions may query and read unauthorized resources. This vulnerability affects healthcare organizations and FHIR service administrators, who should assess exposure and review access controls to prevent unauthorized resource access. The CVE Progra [truncated]
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition. This vulnerability highlights the need for defenders to verify access controls and authentication mechanisms in multi-tenant e [truncated]
SmileCDR HAPI FHIR vulnerability allows unauthenticated attackers to exhaust server heap or crash services via compressed payloads. Defenders should assess exposure, prioritize remediation, and verify affected versions. The vulnerability impacts HAPI FHIR instances, particularly those exposed to untrusted networks. Affected deployments require immediate attention, and defenders should review official advi [truncated]