PT-2024-12882 · Unknown · Openclinic Ga
CVE-2023-40279
·
Published
2024-03-19
·
Updated
2024-08-01
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClinic GA version 5.247.01
Description
An issue was discovered in OpenClinic GA, allowing an attacker to perform a directory path traversal via the
Page parameter in a GET request to the "main.do" endpoint.Recommendations
For OpenClinic GA version 5.247.01, consider restricting access to the
main.do endpoint or validating the Page parameter to prevent directory path traversal until a patch is available.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclinic Ga