Approved changes feed: RSS · Atom

cpe:2.3:a:openmrs:openmrs-module-fhir2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenmrs (06cb4728-e719-522c-9a70-e900854f95b6)
ProductOpenmrs Module Fhir2 (23bd2683-2728-5d42-addf-a81359188a64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-46823 vulnerable 2026-06-08 07:27:08.937887 OpenMRS has Vulnerability in FHIR2 Module Privileges
openmrs-module-fhir2 provides the FHIR REST API and related services for OpenMRS, an open medical records system. In versions of the FHIR2 module prior to 2.5.0, privileges were not always correctly checked, which means that unauthorized users may have been able to add or edit data they were not supposed to be able to. All implementers should update to FHIR2 2.5.0 or newer as soon as is feasible to receive a patch.
Published: 2025-05-29T17:56:23.199Z
Updated: 2025-05-29T18:32:00.222Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.