CVE-2023-40278

OpenClinic GA 5.247.01 is affected in the printAppointmentPdf.jsp component. The issue is an information-disclosure vulnerability triggered by manipulating the AppointmentUid parameter, allowing an attacker to determine whether a specific appointment exists via the error message. The root cause i...