---
id: 4101
title: "[CVE-2020-28937] OpenClinic Version 0.8.2 Advisory"
cve: CVE-2020-28937
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/openclinic-version-0-8-2-advisory"
published_at: "2020-12-01T00:00:00Z"
tags: ["rce", "advisory", "file-upload", "missing-authentication", "openclinic", "medical-records", "cve-2020-28937"]
phying_url: "https://phying.com/item/4101"
lang: en
---

# [CVE-2020-28937] OpenClinic Version 0.8.2 Advisory

## Summary

Four flaws in OpenClinic 0.8.2: unauthenticated access to patient test results (CVE-2020-28937), RCE via insecure file upload, XSS privilege escalation, and path traversal; no fixed release exists.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2020-28937
- **Published:** 2020-12-01T00:00:00Z
- **Original:** https://bishopfox.com/blog/openclinic-version-0-8-2-advisory
- **Phying News:** https://phying.com/item/4101