RCE in Nextgen Mirth Connect PoC

RCE vulnerability in Mirth Connect (CVE-2023-37679 and CVE-2023-43208)

CVE-2023-43208 is a serious security bug in NextGen Mirth Connect, a tool used by hospitals and clinics to share patient data. This bug lets hackers break into the system without needing a password. Since Mirth Connect is widely used in healthcare, fixing this bug quickly is crucial to protect patient information.

The bug came to light after an earlier problem, CVE-2023-37679, was supposed to be fixed. However, the fix wasn't enough, leading to the discovery of CVE-2023-43208. This new issue affects all versions of Mirth Connect up to 4.4.0 and needs an update to version 4.4.1 to be safe.