CVE-2024-22725

2024-01-2416:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-22725

reflected cross-site scripting

error reporting

unix

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

JSON

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server’s error reporting.

OSVersionArchitecturePackageVersionFilename
Debian12allorthanc<= 1.10.1+dfsg-2+deb12u1orthanc_1.10.1+dfsg-2+deb12u1_all.deb
Debian11allorthanc<= 1.9.2+really1.9.1+dfsg-1+deb11u1orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
Debian10allorthanc<= 1.5.6+dfsg-1orthanc_1.5.6+dfsg-1_all.deb
Debian999allorthanc< 1.12.2+dfsg-1orthanc_1.12.2+dfsg-1_all.deb
Debian13allorthanc< 1.12.2+dfsg-1orthanc_1.12.2+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	orthanc	<= 1.10.1+dfsg-2+deb12u1	orthanc_1.10.1+dfsg-2+deb12u1_all.deb
Debian	11	all	orthanc	<= 1.9.2+really1.9.1+dfsg-1+deb11u1	orthanc_1.9.2+really1.9.1+dfsg-1+deb11u1_all.deb
Debian	10	all	orthanc	<= 1.5.6+dfsg-1	orthanc_1.5.6+dfsg-1_all.deb
Debian	999	all	orthanc	< 1.12.2+dfsg-1	orthanc_1.12.2+dfsg-1_all.deb
Debian	13	all	orthanc	< 1.12.2+dfsg-1	orthanc_1.12.2+dfsg-1_all.deb