CVE-2020-14485

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.

OpenClinic GA versiones 5.09.02 y 5.89.05b, pueden permitir a un atacante omitir los controles de acceso del lado del cliente o usar una petición diseñada para iniciar una sesión con una funcionalidad limitada, lo que puede permitir una ejecución de funcionalidades administrativas tales como consultas SQL