Skip to content
OpenAdvisories
High ICSMA-24-023-01 1 CVE

Orthanc Osimis DICOM Web Viewer

Published Jan 23, 2024 · Updated Jan 23, 2024

Vendor: Orthanc Product: Osimis WebViewer

Summary

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code inside the victim's browser.

Vulnerabilities 1

  • High 7.1
    CVE-2023-7238

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer

    A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's …

    Orthanc Osimis DICOM Web Viewer

Revision history

  1. #1

    Initial Publication

References