High severity7.5NVD Advisory· Published Mar 19, 2024· Updated Jun 17, 2026
CVE-2023-40278
CVE-2023-40278
Description
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*
- OpenClinic GA/OpenClinic GAdescription
- Range: =5.247.01
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.