CVE-2020-14491

OpenClinic GA is affected by CVE-2020-14491 due to missing authorization checks before SQL query execution, enabling a low-privilege user to access privileged information. Affected versions: OpenClinic GA 5.09.02 and 5.89.05b. Root cause: improper permission validation before database operations....