What is GHSA-rg7r-823r-cw49?

GHSA-rg7r-823r-cw49 is a security advisory published by GitHub Security Advisories with High severity. CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment...

Which CVE IDs does GHSA-rg7r-823r-cw49 cover?

GHSA-rg7r-823r-cw49 covers the following CVE IDs: CVE-2025-30043. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-rg7r-823r-cw49High

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2025-30043 →

📋 Description

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents.

This issue was fixed in version 2026.MS3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-30043
https://cert.pl/en/posts/2026/10/CVE-2025-30043
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
https://github.com/advisories/GHSA-rg7r-823r-cw49