CVE-2026-102845: gedelumbung HospitalManagement HTTP Response index.php error_reporting information disclosure
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function errorreporting of the file index.php of the component HTTP Response. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be initiated remotely and requires no privileges or user interaction. An exposed HospitalManagement instance may therefore be reachable by an unauthenticated attacker over the network.
What is the likely impact of successful exploitation?
Successful exploitation causes information disclosure through the HTTP response behavior associated with index.php error reporting. The provided data indicates confidentiality impact is limited and does not identify integrity or availability impact.
Is a public exploit available?
Yes. Exploit details have been publicly disclosed and may be used.
Which releases should be considered affected?
The issue affects gedelumbung HospitalManagement through commit c2d45543789a3887067d3915f69d44cfc2cf76a8. Because the product uses a rolling release model, specific affected or fixed release versions are not available.
Is a vendor fix or response available?
The project was notified through an issue report but had not responded at the time of the provided information. No fixed version or workaround is identified in the data.