cbcvebase.
CVE-2023-40279
published 2024-03-19

CVE-2023-40279: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.

PriorityP356high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
3.38%
87.3th percentile
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.

Affected

1 ranges
VendorProductVersion rangeFixed in
openclinic_ga_projectopenclinic_ga——

Detection & IOCsextracted from sources · hover to see the quote

url/openclinic/main.do?Page=../../main.jsp↗
path/openclinic/main.do↗
  • →Monitor GET requests to main.do where the 'Page' parameter contains directory traversal sequences (e.g., '../' or '..%2F') pointing outside the intended directory. ↗
  • →The exploit is authenticated — look for traversal attempts accompanied by a valid JSESSIONID cookie, indicating abuse of a logged-in session. ↗
  • →Flag GET requests where the Page parameter resolves to files outside the web application root, particularly .jsp files, as this can lead to retrieval and execution of arbitrary files. ↗
  • ·The vulnerability is authenticated, meaning the attacker must have a valid session (JSESSIONID) prior to exploitation — unauthenticated scanning will not trigger this attack path. ↗
  • ·Exploitation was tested on Windows 10 and Windows 11 hosts; path traversal behavior and file accessibility may differ on Linux-based deployments. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.