PT-2025-10900
CVE-2025-25927
·
Publicado
2025-03-11
·
Atualizado
2025-03-11
Descrição por
CVSS 3.1
6.8
MédiaMétricasAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Openmrs version 2.4.3 Build 0ff0ed
Description:
A Cross-Site Request Forgery (CSRF) issue allows attackers to execute arbitrary operations via a crafted GET request.
Recommendations:
For Openmrs version 2.4.3 Build 0ff0ed, consider implementing proper CSRF token validation to prevent attackers from executing arbitrary operations. As a temporary workaround, restrict access to sensitive operations that can be executed via GET requests until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾