connect
connect copied to clipboard
The swiss army knife of healthcare integration.
**Describe the bug** Many of our channels extract the patient ID for custom metadata columns and destination mappings. We have recently attempted to move the repeated bit of code which...
**Describe the bug** If you add two or more entries to the globalMap where the key only differs by case, then only one entry will appear in the dashboard. All...
The 4.0 User Guide at [doc.nextgen.com](https://docs.nextgen.com/bundle/Mirth_User_Guide_40/page/connect/connect/topics/c_Using_Open_Source_Software_mirth_connect_ug.html) states Mirth is licensed under MPL 1.1. The Github README.MD and LICENSE.txt are clearly MPL 2.0. The user guide should be updated to correctly...
In the past week I've been having a lot of problems with Mirth freezing whenever I tried to edit JavaScript in it. The workaround of writing/editing JavaScript in a code...
It is not really a bug, you probably have knowingly introduced this, but it is now mandatory to register the first user that starts the administrator, [see here](https://github.com/nextgenhealthcare/connect/blob/development/client/src/com/mirth/connect/client/ui/FirstLoginDialog.java#L50). I would...
Fixes: #4752 Current used xstream version has multiple high and critical CVE's associated with it. This update fixes those known security concerns.
**Describe the security issue** MirthConnect Web portal and API : the Jetty web server is configured to automatically list the contents of directories that do not have an index page...
**Describe the security issue** The application discloses technical internal information about the technologies or components used in the error pages. [CWE-209](https://cwe.mitre.org/data/definitions/209.html),[CWE-200](https://cwe.mitre.org/data/definitions/200.html) **Vulnerability Location** Stack traces on MirthConnect web portal and...
**Describe the bug** When using SMB on File Connectors in 4.1.0, this error may be encountered: ``` ERROR 2022-07-31 11:24:06.016 com.mirth.connect.connectors.file.FileReceiver: Error polling in channel: d8f03730-21f1-49d8-8bb3-676efe40051f java.lang.IllegalAccessError: failed to access...
**Describe the security issue** The cookie JSESSIONID is missing attributes HttpOnly and SameSite. This state exposes the affected cookies to be leveraged to achieve a [session hijacking](https://owasp.org/www-community/attacks/Session_hijacking_attack) or a [cross-site...