CVE-2020-14490

—

CVSS 3.1

8.8 high

EPSS

2%p83

Published

Jul 29, 2020 (Jul 29, 2020)

Modified

Jun 17, 2026

Description

OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.

Vendors: openclinic ga project
Products: openclinic ga
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.