CVE-2025-25927

MEDIUM CVSS: 6.8 Published: 2025-03-11 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) in Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted GET request.

Affected Platforms

Openmrs Openmrs

Weakness Type

CWE-352

References