CVE-2026-102843

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8

Description A remote path traversal flaw exists in the Endpoint component. The issue occurs within the hapus() function located in the application/modules/admin/controllers/data galeri.php file. An attacker can trigger this by manipulating the gbr argument, allowing unauthorized access to files or directories on the server.

Recommendations As a temporary workaround, restrict access to the hapus() function in the application/modules/admin/controllers/data galeri.php file or avoid using the gbr argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.