Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rv57-pvch-f98r

Опубликовано: 23 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.

EPSS

Процентиль: 42%
0.00199
Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.1
nvd
около 2 лет назад

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.

EPSS

Процентиль: 42%
0.00199
Низкий

7.1 High

CVSS3

Дефекты

CWE-79