CVE-2023-40275

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to common/search/searchByAjax/patientslistShow.jsp...

CVE-2023-40275

creationtimestamp| type| source ---|---|--- 2024-03-19 02:26:21+00:00| seen| https://t.me/ctinow/211105 2024-03-19 02:26:28+00:00| seen| https://t.me/ctinow/211111...

CVE-2023-40275

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to common/search/searchByAjax/patientslistShow.jsp...

CVE-2023-40275

The open-source hospital information management system OpenClinic GA version 5.247.01 is vulnerable to an issue that allows the retrieval of patient lists by an unauthorized actor. The vulnerability stems from the ability to execute queries, such as findFirstname=, against the _common/search/sear...