CVE-2026-24847: Openemr Missing Permission Settings Check

The user permissions settings block is not guarded by the global user permissions feature flag, potentially exposing access to unauthorized configurations.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0PHP
greprules fetch cve-2026-24847-openemr-missing-permission-settings-check --engine opengrep

Description

The user permissions settings block is not guarded by the global user permissions feature flag, potentially exposing access to unauthorized configurations.