CVE-2025-31117: OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability
First published: Mon Mar 31 2025(Updated: )
OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response but can be exploited through DNS or HTTP interactions to exfiltrate sensitive information. This vulnerability is fixed in 7.0.3.1.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenEMR | <7.0.3.1 | |
| OpenEMR | <7.0.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-31117?
CVE-2025-31117 is rated as a critical severity vulnerability due to its potential for exploitation through unauthorized external requests.
How do I fix CVE-2025-31117?
To fix CVE-2025-31117, update OpenEMR to version 7.0.3.2 or later, where the vulnerability has been addressed.
What causes the CVE-2025-31117 vulnerability?
CVE-2025-31117 is caused by an Out-of-Band Server-Side Request Forgery (OOB SSRF) flaw that allows attackers to send unauthorized requests via the server.
Which versions of OpenEMR are affected by CVE-2025-31117?
OpenEMR versions up to and including 7.0.3.1 are affected by CVE-2025-31117.
What are the potential impacts of CVE-2025-31117?
Exploitation of CVE-2025-31117 could allow attackers to access sensitive data or perform actions on external systems without authorization.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/event
- vendor/openemr
- canonical/openemr
- vendor/open-emr