CVE-2020-14490CWE-22

OpenClinic GA

High · published July 29, 2020

CVSS v3.1
8.8
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-07-29T12:25Z
EPSS history
Timeline
  • 29 JUL 12:25Z
    OpenClinic GA
    cvelistv5