CVE-2023-40275

Description

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.

NVD

Severity: N/A
CVE ID: CVE-2023-40275
CVSS Score: N/A
CVSS Metrics: NVD assessment not yet provided.

Refrence: NVDMITRE

Proof Of Concept

BugBountyHunterCVE

Refrence: GitHub