CVE-2023-40279

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*

History

14 Apr 2025, 13:40

Type Values Removed Values Added
First Time Openclinic Ga Project
Openclinic Ga Project openclinic Ga
CPE cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*
References () https://github.com/BugBountyHunterCVE/CVE-2023-40279/blob/main/CVE-2023-40279_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md - () https://github.com/BugBountyHunterCVE/CVE-2023-40279/blob/main/CVE-2023-40279_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.md - Exploit, Third Party Advisory
References () https://sourceforge.net/projects/open-clinic/ - () https://sourceforge.net/projects/open-clinic/ - Product

19 Mar 2024, 13:26

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-19 13:15

Updated : 2025-04-14 13:40


NVD link : CVE-2023-40279

Mitre link : CVE-2023-40279


JSON object : View

Products Affected

openclinic_ga_project

  • openclinic_ga
CWE

No CWE.