CVE-2026-63194

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni including ERP & ELIS Atom Feed Clients. In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93...

CVE-2026-63194 Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni including ERP & ELIS Atom Feed Clients. In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93...

CVE-2026-63194 Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni including ERP & ELIS Atom Feed Clients. In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93...

CVE-2026-63194

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni including ERP & ELIS Atom Feed Clients. In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93...

CVE-2026-63194

The bahmnicore OpenMRS module (used in Bahmni ) is vulnerable to a path traversal flaw in version 0.93 due to insufficient validation of input paths during the admin CSV import process. This vulnerability could lead to an arbitrary file write . The issue has been patched in version 0.93.1 . No sp...

CVE-2026-63194: Bahmni bahmni-core: OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients)

OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni including ERP & ELIS Atom Feed Clients. In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. This issue has been patched in version 0.93...