CVE-2023-40279

Deeper analysis

OpenClinic GA version 5.247.01 contains a path traversal vulnerability (CWE-22) that allows an unauthenticated remote attacker to supply an arbitrary directory path through the Page parameter of a GET request to main.do. The flaw received a CVSS 3.1 score of 7.5, reflecting network attackability, low complexity, and high confidentiality impact with no required privileges or user interaction.

An attacker can therefore retrieve files outside the intended web root, exposing sensitive configuration data, source code, or other restricted content stored on the server. The published proof-of-concept report demonstrates successful traversal without authentication, confirming that any reachable instance is directly exposed to information disclosure.

EPSS scores have remained near 0.20 with only a negligible peak-to-current difference, indicating limited observed exploitation interest since disclosure. No vendor advisory or patch information appears in the referenced project pages or reports.