Vulnerability · Published Mar 31, 2025 · Assigned by GitHub_M

CVE-2025-31117OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability

Medium 6.9

In plain English

A medium-severity server-side request forgery in openemr from openemr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.5%top 58.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response but can be exploited through DNS or HTTP interactions to exfiltrate sensitive information. This vulnerability is fixed in 7.0.3.1.

Affected products (as reported)

Vendor	Product	Versions
openemr	openemr	< 7.0.3.1

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://github.com/openemr/openemr/security/advisories/GHSA-2pvv-ph3x-2f9h x_refsource_CONFIRM
https://github.com/openemr/openemr/commit/aa6f50efb2971285633fa77ea7a50949408cab12 x_refsource_MISC