CVE-2020-20444

2021-06-1615:51:50

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected ‘file’ GET parameter in ‘/shared/view_source.php’ which “could” lead to RCE vulnerability .

References

cwe.mitre.org/data/definitions/23.html

github.com/jact/openclinic/issues/8