{"id":"CVE-2020-14490","aliases":["EUVD-2020-6626","GHSA-p38c-f9r4-phgg"],"status":"published","title":"OpenClinic GA","description":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02458,"percentile":0.84567,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2020-07-29T12:25:53Z","modified":"2026-06-17T02:54:51Z","products":[{"vendor":"open source","product":"openclinic ga"},{"vendor":"openclinic_ga_project","product":"openclinic_ga"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14490"},{"url":"https://github.com/advisories/GHSA-p38c-f9r4-phgg"}],"sources":{"cve":[{"id":"CVE-2020-14490","title":"OpenClinic GA","description":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.","status":"published","published":"2020-07-29T12:25:53.168Z","modified":"2024-09-16T17:03:10.971Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-6626","description":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.","status":"published","published":"2020-07-29T12:25:53Z","modified":"2024-09-16T17:03:10Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:45.787721Z"}],"ghsa":[{"id":"GHSA-p38c-f9r4-phgg","title":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter...","description":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.","status":"published","published":"2022-05-24T17:24:36Z","modified":"2023-01-29T05:03:26Z","updated_at":"2026-11-02T14:45:19.492424Z"}],"nvd":[{"id":"CVE-2020-14490","description":"OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.","status":"published","published":"2020-07-29T13:15:10.087Z","modified":"2026-06-17T02:54:51.527Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:06:10.994748Z"}]}}