CVE-2020-27227: Openclinic Ga Project Openclinic Ga

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can cause commands to be executed on the server. An attacker can send a web request with parameters containing specific parameter to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and compromise underlying operating system.

Affected products

• Openclinic Ga Project Openclinic Ga: version 5.173.3 only

Published 2021-04-13. Last modified 2026-06-17.