Unrated severityNVD Advisory· Published Mar 19, 2024· Updated Apr 10, 2025

CVE-2023-40275

Description

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenClinic GA/OpenClinic GAdescription
Openclinica/Openclinicallm-fuzzy
Range: = 5.247.01

Patches

Vulnerability mechanics

References

github.com/BugBountyHunterCVE/CVE-2023-40275/blob/main/CVE-2023-40275_Unauthenticated-Patient-List-Retrieval_OpenClinic-GA_5.247.01_Report.mdmitre
sourceforge.net/projects/open-clinic/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000