Critical severity9.8NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026

CVE-2020-27234

Description

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenClinic GA/OpenClinic GAdescription
Openclinica/Openclinicallm-fuzzy
Range: = 5.173.3

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2020-1207nvdExploitTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000