High severity7.5NVD Advisory· Published Mar 19, 2024· Updated Jun 17, 2026

CVE-2023-40280

Description

An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openclinic Ga Project/Openclinic Ga
cpe:2.3:a:openclinic_ga_project:openclinic_ga:5.247.01:*:*:*:*:*:*:*
OpenClinic GA/OpenClinic GAdescription
Openclinica/Openclinicallm-fuzzy
Range: = 5.247.01

Patches

Vulnerability mechanics

References

github.com/BugBountyHunterCVE/CVE-2023-40280/blob/main/CVE-2023-40280_Authenticated-Directory-Path-Traversal_OpenClinic-GA_5.247.01_Report.mdnvdExploitThird Party Advisory
sourceforge.net/projects/open-clinic/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000