EUVD-2026-76761Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Requires an authenticated session (PR:L); network-reachable DWR endpoint with no complexity; no confidentiality or availability impact described.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
5DescriptionCVE.org
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.
AnalysisAI
Improper authorization in OpenMRS allows any authenticated low-privilege user to invoke the startHl7ArchiveMigration DWR service, an administrative method that should be restricted to admin-level accounts. Affected versions are OpenMRS core prior to 1.23.0 (1.x branch) and prior to 2.10.0 (2.x branch), both patched by their respective releases. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session in OpenMRS - any role level suffices, not just administrators. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 8.7 with PR:N (no privileges required) is materially overstated and conflicts with the description's explicit 'authenticated user' prerequisite - a meaningful discrepancy that inflates the score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade OpenMRS core to version 1.23.0 (for 1.x deployments) or version 2.10.0 (for 2.x deployments), which introduce the corrected authorization check on the `startHl7ArchiveMigration` DWR endpoint. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all OpenMRS deployments and identify systems running versions prior to 1.23.0 (1.x branch) or prior to 2.10.0 (2.x branch); implement interim access controls to restrict the startHl7ArchiveMigration service to verified administrative accounts where technically feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-285 – Improper Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today