Openclinic Ga Project vulnerabilities
We track 4 vulnerabilities in Openclinic Ga Project products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
Latest Openclinic Ga Project vulnerabilities
- 7.5 High severity
ga: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.
- 7.5 High severity
ga: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific app
- 7.5 High severity
openclinic_ga: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.
- 9.1 Critical severity
openclinic_ga: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.