CVE-2020-27228

7.8 highEPSS 0.8%

High (7.8) in openclinic ga project openclinic ga. EPSS 0.8% chance of exploitation in the next 30 days.

An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwriting the binary can result in privilege escalation. An attacker can replace a file to exploit this vulnerability.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-04-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openclinic_ga_project:openclinic_ga

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1204
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1204

Check your stack JSON