CVE-2025-31117

MEDIUM EPSS 33.1%
Published Mar 31, 20251y ago · Modified Jun 17, 20262w ago
6.9 CVSS 4.0
Medium
Find Similar
Published Mar 31, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response but can be exploited through DNS or HTTP interactions to exfiltrate sensitive information. This vulnerability is fixed in 7.0.3.1.

CVSS Details

Base Score
6.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
33.1% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-918 Server-Side Request Forgery (SSRF) Validation

Affected Products 1

VendorProductVersionRange
open-emropenemr* <7.0.3.1

References 2

  • github.com https://github.com/openemr/openemr/commit/aa6f50efb2971285633fa77ea7a50949408cab12
    Patch
  • github.com https://github.com/openemr/openemr/security/advisories/GHSA-2pvv-ph3x-2f9h
    ExploitVendor Advisory

Remediation

  • github.com https://github.com/openemr/openemr/commit/aa6f50efb2971285633fa77ea7a50949408cab12
    Patch