BugBountyHunterCVE/CVE-2023-40275

BugBountyHunterCVE/CVE-2023-40275

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-40275↗
9.1 CRITICAL—

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.