Unrated severityNVD Advisory· Published Mar 19, 2024· Updated Aug 2, 2024

CVE-2023-40280

Description

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenClinic GA/OpenClinic GAdescription
Openclinica/Openclinicallm-fuzzy
Range: =5.247.01

Patches

Vulnerability mechanics

References

github.com/BugBountyHunterCVE/CVE-2023-40280/blob/main/CVE-2023-40280_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.mdmitre
sourceforge.net/projects/open-clinic/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000