CVE-2026-63194
- Source
- https://cve.org/CVERecord?id=CVE-2026-63194
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63194.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-63194
- Aliases
-
- GHSA-pmw7-2mfv-4592
- Published
- 2026-11-11T02:34:24Z
- Modified
- 2026-11-12T02:48:37Z
- Severity
-
- 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import
- Details
-
OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93.1.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-22" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63194.json" }- References
Affected packages
Git / github.com/bahmni/bahmni-core
Affected ranges
- Type
- GIT
- Repo
- https://github.com/bahmni/bahmni-core
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "= 0.93" }, { "last_affected": "= 0.93" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "introduced": "0" }, { "fixed": "0.93.1" } ], "source": "DESCRIPTION" } ] }