Skip to content
OpenAdvisories
Medium · 5.8 CVE-2025-24485 EUVD-2025-22913GHSA-w28g-rm5j-24w5

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted H…

Published Jul 28, 2025 · Updated Nov 3, 2025 · Assigned by talos

Description

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.5.860 —

References