Medium · 6.1 CVE-2024-22725 EUVD-2024-20256GHSA-j2p7-j8v8-q5g2

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the s…

Published Jan 24, 2024 · Updated Jun 4, 2025 · Assigned by mitre

Package: orthanc Package: orthanc Ecosystem: Debian Ecosystem: Ubuntu

Description

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	orthanc	1.12.2+dfsg-1	—
Debian 13	orthanc	1.12.2+dfsg-1	—
Debian 12	orthanc	No fix yet	—

Ubuntu