CVE-2023-40275

Publication date

2024-03-19 00:00:00

Family

mitre

State

PUBLISHED

Description

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.