CVE-2020-20444

2021-06-1616:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected ‘file’ GET parameter in ‘/shared/view_source.php’ which “could” lead to RCE vulnerability .

CPENameOperatorVersion
opencliniceqopenclinic_0.8.20130107
opencliniceqopenclinic_0.8.20130912
opencliniceqopenclinic_0.8.20080528
opencliniceqopenclinic_0.7.20040812
opencliniceqopenclinic_0.8.20071029
opencliniceqopenclinic_0.7.20041207
opencliniceqopenclinic_0.7.20041105
opencliniceqopenclinic_0.8.20071028
opencliniceqopenclinic_0.8.20061013
opencliniceqopenclinic_0.8.20160412

Name	Operator	Version
openclinic	eq	openclinic_0.8.20130107
openclinic	eq	openclinic_0.8.20130912
openclinic	eq	openclinic_0.8.20080528
openclinic	eq	openclinic_0.7.20040812
openclinic	eq	openclinic_0.8.20071029
openclinic	eq	openclinic_0.7.20041207
openclinic	eq	openclinic_0.7.20041105
openclinic	eq	openclinic_0.8.20071028
openclinic	eq	openclinic_0.8.20061013
openclinic	eq	openclinic_0.8.20160412