CVE-2020-14490

published 2020-07-29

CVE-2020-14490: OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of…

Priority P3 51 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
open_source	openclinic_ga	—	—
open_source	openclinic_ga	—	—
openclinic_ga_project	openclinic_ga	—	—
openclinic_ga_project	openclinic_ga	—	—

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22