CVE-2023-40278

OpenClinic GA 5.247.01 is vulnerable to an Information Disclosure flaw in the printAppointmentPdf.jsp component. The root cause is improper handling of error messages when the AppointmentUid parameter is manipulated, which allows an attacker to determine if a specific appointment exists. Practica...