CVE-2018-10573
interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter.
Date published : 2018-04-30
https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051