Threats tagged 'ghsa-3rr6-p4hr-wxxx'

A vulnerability in sfturing hosp_order up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 allows local attackers to cause cleartext storage of sensitive information. The issue is located in the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Exploit code has been publicly disclosed. The project uses rolling releases, so specific affected or fixed versions are not available. The vendor has not responded to the issue report. The vulnerability has a low severity score (CVSS 3.3) and requires local access with low privileges to exploit.