Vulnerability Details CVE-2023-7238
A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.3%
CVSS Severity
CVSS v3 Score 7.1
References
Products affected by CVE-2023-7238
-
cpe:2.3:a:orthanc-server:osimis_web_viewer:1.4.2.0-9d9eff4