Openclinic Project Openclinic
4 CVEs affecting Openclinic Project Openclinic. Latest disclosed: 2021-06-16. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28937 | High | 7.5 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results… |
CVE-2020-20444 | High | 7.2 | 2021-06-16 | Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view… |
CVE-2020-28939 | High | 7.2 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability allows authenticated users (with substant… |
CVE-2020-28938 | Medium | 5.4 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other us… |