CVE-2025-67645

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-67645

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-67645.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-67645

Aliases

GHSA-vjmv-cf46-gffv

Published

2026-01-27T23:20:18.515Z

Modified

2026-07-15T01:49:14.912306972Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint

Details

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters (pubpid / pid) to reference another user’s record; the server accepts the modified IDs and applies the changes to that other user’s profile. This allows one user to alter another user’s profile data (name, contact info, etc.), and could enable account takeover. Version 7.0.4 fixes the issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67645.json",
    "cwe_ids": [
        "CWE-284"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/openemr/openemr

Affected ranges

Type

GIT

Repo

https://github.com/openemr/openemr

Events

Introduced

42a1c2a6f8dadd7c73da5cf4c06fa0d1ce8b7b98

Fixed

e2a682ee71aac71a9f04ae566f4ffca10052bc4a

Database specific

{
    "extracted_events": [
        {
            "introduced": "7.0.3"
        },
        {
            "last_affected": "7.0.3"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:open-emr:openemr:7.0.3:*:*:*:*:*:*:*"
}

Affected versions

7.*

7.0.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-67645.json"