Openclinic vulnerabilities
We track 2 vulnerabilities in Openclinic products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Openclinic vulnerabilities
- 7.5 High severity
ga: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.
- 7.5 High severity
ga: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific app