Cross Site Scripting (XSS)

Orthanc is vulnerable to Cross Site Scripting XSS. The vulnerability is caused due to a missing sanitization in the server's error reporting. This can lead to compromising Confidentiality and Integrity of the system...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

DEBIAN-CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

UBUNTU-CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

Cross site scripting

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

PT-2024-19545 · Orthanc +1 · Orthanc +1

Name of the Vulnerable Software and Affected Versions: Orthanc versions prior to 1.12.2 Description: The issue is a reflected cross-site scripting XSS vulnerability. It was present in the server's error reporting. Recommendations: For Orthanc versions prior to 1.12.2, update to version 1.12.2 or...

Orthanc Security Breach

Orthanc is a free and open source software from Orthanc. A security vulnerability exists in versions of Orthanc prior to 1.12.2 that stems from vulnerability to reflective cross-site scripting XSS attacks...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

CVE-2024-22725

CVE-2024-22725 affects Orthanc versions before 1.12.2, with a reflected XSS vulnerability in the server’s error reporting. • Affected: Orthanc prior to 1.12.2. • Root cause: reflected XSS in error reporting (per PT-2024-19545). • Impact: low confidentiality/integrity with no availability impact p...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

Orthanc Osimis DICOM Web Viewer

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Orthanc Equipment : Osimis Web Viewer Vulnerability : Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary...

Debian: Security Advisory (DLA-3562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3562-1] orthanc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3562-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky September 12, 2023 https://wiki.debian.org/LTS -...

Debian dla-3562 : orthanc - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3562 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3562-1 [email protected] https://www.debian.org/lts/security/...

DLA-3562-1 orthanc - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5473-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5473-1 : orthanc - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5473 advisory. It was discovered that authenticated API users of Orthanc, a DICOM server for medical imaging, could overwrite arbitrary files and in some setups execute arbitrary...

[SECURITY] [DSA 5473-1] orthanc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5473-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2023 https://www.debian.org/security/faq -...