CVE-2024-22725

Опубликовано: 24 янв. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.

Ссылки

https://orthanc.uclouvain.be/hg/orthanc/file/Orthanc-1.12.2/NEWS
Vendor Advisory
https://orthanc.uclouvain.be/hg/orthanc/rev/505416b269a0
Patch
https://orthanc.uclouvain.be/hg/orthanc/file/Orthanc-1.12.2/NEWS
Vendor Advisory
https://orthanc.uclouvain.be/hg/orthanc/rev/505416b269a0
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:*

Версия до 1.12.2 (исключая)

EPSS

Процентиль: 69%

0.00597

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2024-22725

CVSS3: 6.1

ubuntu

около 2 лет назад

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.

CVE-2024-22725

CVSS3: 6.1

debian

около 2 лет назад

Orthanc versions before 1.12.2 are affected by a reflected cross-site ...

GHSA-j2p7-j8v8-q5g2

CVSS3: 6.1

github

около 2 лет назад

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.

EPSS

Процентиль: 69%

0.00597

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79