CVE-2025-25927

Name of the Vulnerable Software and Affected Versions: Openmrs version 2.4.3 Build 0ff0ed

Description: A Cross-Site Request Forgery (CSRF) issue allows attackers to execute arbitrary operations via a crafted GET request.

Recommendations: For Openmrs version 2.4.3 Build 0ff0ed, consider implementing proper CSRF token validation to prevent attackers from executing arbitrary operations. As a temporary workaround, restrict access to sensitive operations that can be executed via GET requests until a patch is available.