Password Change Logging Issue in OpenEMR by OpenEMR

CVE-2025-32967

What is CVE-2025-32967?

OpenEMR is a widely-used open-source electronic health record and medical practice management application. A vulnerability exists in earlier versions (prior to 7.0.3.4) related to a logging oversight that fails to record password change events in the client-side log viewer. This lack of logging can hinder administrators' ability to track critical actions, thereby diminishing system traceability and potentially allowing for insider misuse or unauthorized access. The issue has been addressed in version 7.0.3.4, which includes a patch that rectifies this logging deficiency, ensuring better auditing and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References