CVE-2020-14488
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| open source | OpenClinic GA | 5.09.02 | affected |
| open source | OpenClinic GA | 5.89.05b | affected |
Weaknesses
- CWE-434: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434
Workarounds
OpenClinic GA is aware of these vulnerabilities but has not provided any confirmation of their resolution. Please upgrade to the latest version to ensure you have all current fixes.
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.