CVE-2020-14490

OpenClinic GA

CVSS 8.8 HIGHEPSS 2.5%CWE-22

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

open source · OpenClinic GA

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01