CVE-2023-40278

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-40278
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error message.
CVSS

No CVSS.

References
Link Resource
https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Information-Disclosure_OpenClinic-GA_5.247.01_Report.md Exploit Third Party Advisory
https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Information-Disclosure_OpenClinic-GA_5.247.01_Report.md Exploit Third Party Advisory
https://sourceforge.net/projects/open-clinic/ Product
https://sourceforge.net/projects/open-clinic/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*
History

14 Apr 2025, 13:40

Type Values Removed Values Added
First Time Openclinic Ga Project
Openclinic Ga Project openclinic Ga
CPE cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*
References () https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Information-Disclosure_OpenClinic-GA_5.247.01_Report.md - () https://github.com/BugBountyHunterCVE/CVE-2023-40278/blob/main/CVE-2023-40278_Information-Disclosure_OpenClinic-GA_5.247.01_Report.md - Exploit, Third Party Advisory
References () https://sourceforge.net/projects/open-clinic/ - () https://sourceforge.net/projects/open-clinic/ - Product

19 Mar 2024, 13:26

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-19 12:15

Updated : 2025-04-14 13:40

NVD link : CVE-2023-40278

Mitre link : CVE-2023-40278

JSON object : View

Products Affected

openclinic_ga_project

  • openclinic_ga
CWE

No CWE.