Skip to content
OpenAdvisories

Package · Maven

org.openmrs.web:openmrs-web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.4
    CVE-2026-40076

    OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload

    OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the module upload endpoint at POST `/openmrs/ws/rest/v1/module` is vulnerable to a Zip Slip path traversal attack. During…

    openmrs openmrs-core org.openmrs.web:openmrs-web Maven
  • High 8.2
    CVE-2026-40075

    OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet

    OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnerable to a path traversal attack. The ModuleResourcesServlet c…

    openmrs openmrs-core org.openmrs.web:openmrs-web Maven