CVE-2023-40280

OpenClinic GA version 5.247.01 is vulnerable to a directory path traversal flaw. An attacker can exploit this by manipulating the Page parameter in a GET request sent to the popup.jsp endpoint. This vulnerability could allow unauthorized access to restricted directories. As a temporary workaround...