Security feature bypass

2021-06-1616:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected ‘file’ GET parameter in ‘/shared/view_source.php’ which “could” lead to RCE vulnerability .

CPENameOperatorVersion
opencliniceq0.8.20160412

CPE	Name	Operator	Version
	openclinic	eq	0.8.20160412

References

cwe.mitre.org/data/definitions/23.html

github.com/jact/openclinic/issues/8