Lucene search
HistoryMar 19, 2024 - 1:15 p.m.
CVE-2023-40279
openclinic ga
directory traversal
get request
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.01
Percentile
84.2%
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.
Related
exploitdb
exploitdb
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
2024-04-15 00:00:00
zdt
zdt
OpenClinic GA 5.247.01 - Path Traversal (Authenticated) Vulnerability
2024-04-15 00:00:00
cve
cve
CVE-2023-40279
2024-03-19 13:15:06
cvelist
cvelist
CVE-2023-40279
2024-03-19 00:00:00
vulnrichment
vulnrichment
CVE-2023-40279
2024-03-19 00:00:00
packetstorm
packetstorm
OpenClinic GA 5.247.01 Path Traversal
2024-04-15 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.01
Percentile
84.2%
Related for NVD:CVE-2023-40279