BugBountyHunterCVE/CVE-2023-40278

BugBountyHunterCVE/CVE-2023-40278

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-40278↗
7.5 HIGH—

An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error message.