nvd-json-data-feeds/CVE-2023/CVE-2023-402xx/CVE-2023-40275.json

{
  "id": "CVE-2023-40275",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-03-19T01:15:44.743",
  "lastModified": "2024-03-19T13:26:46.000",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 un problema en OpenClinic GA 5.247.01. Permite la recuperaci\u00f3n de listas de pacientes mediante consultas como findFirstname= a _common/search/searchByAjax/patientslistShow.jsp."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/BugBountyHunterCVE/CVE-2023-40275/blob/main/CVE-2023-40275_Unauthenticated-Patient-List-Retrieval_OpenClinic-GA_5.247.01_Report.md",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://sourceforge.net/projects/open-clinic/",
      "source": "cve@mitre.org"
    }
  ]
}