Community Edition vulnerabilities

2 known vulnerabilities in Community Edition from OpenClinica. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Community Edition: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-12922Nov 10, 2025OpenClinica

  A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the component CRF Data Import. Performing manipulation of the argument xml_file results in path traversal. T

• 8.8 High severity

  Community Edition: XML Injection

  CVE-2025-12921Nov 10, 2025OpenClinica

  A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the argument xml_file leads