Skip to main content
critical CISA KEV Ransomware

CVE-2023-43208

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

// Description

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

// Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal remediation due Jun 10, 2024 — past due

Advertisement

// Coverage