THM-Health — Vulnerabilities & Security Advisories 6

THM-Health operates as a healthcare management platform handling sensitive patient data and medical records. Historically, the system has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. With five CVEs currently documented, these weaknesses have allowed unauthorized access to protected health information and potential system compromise. The platform's security posture has been characterized by insufficient input validation and inadequate access controls, leading to consistent exploitation by threat actors targeting healthcare infrastructure. While no major public incidents have been widely reported, the documented vulnerabilities demonstrate persistent security challenges in protecting critical healthcare systems from increasingly sophisticated attacks.