Lucene search

K
cvelistMitreCVELIST:CVE-2023-33466
HistoryJun 29, 2023 - 12:00 a.m.

CVE-2023-33466

2023-06-2900:00:00
mitre
www.cve.org
1
orthanc
api
authenticated
overwrite files
configuration
rce
cve-2023-33466
security

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%