CVE-2025-29789CWE-23

OpenEMR Has Directory Traversal in Load Code feature

Medium · published March 25, 2025

CVSS v4.0
4.6
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00881 · 58.8th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-03-25T20:29Z
EPSS history
Timeline
  • 25 MAR 20:29Z
    OpenEMR Has Directory Traversal in Load Code feature
    cvelistv5