CVE-2022-24830CWE-22

Path Traversal in OpenClinica

Medium · published May 13, 2022

CVSS v3.1
6.5
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). OpenClinica prior to version 3.16 is vulnerable to path traversal in multiple endpoints, leading to arbitrary file read/write, and potential remote code execution. There are no known workarounds. This issue has been patched and users are recommended to upgrade.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03225 · 88.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-05-13T23:40Z
EPSS history
Timeline
  • 13 MAY 23:40Z
    Path Traversal in OpenClinica
    cvelistv5