Threats Tagged 'ghsa-xj97-xjrh-5vfq'

A path traversal vulnerability exists in the gedelumbung HospitalManagement software affecting the hapus function in application/modules/admin/controllers/data_galeri.php. This flaw allows remote attackers to manipulate the 'gbr' argument to perform path traversal. The vulnerability has a medium severity score of 5.1 and an exploit has been publicly released. The project uses continuous delivery with rolling releases, so no specific affected or fixed versions are identified. The vendor has not yet responded to the issue report.