Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes that redirect a user to a malicious webpage, potentially stealing the user’s cookie. This vulnerability poses a risk to user confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-54759 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious HTML payload and inject it into the Sante PACS Server. This can be done through user input fields that do not properly sanitize input, allowing the attacker to redirect users to a malicious site when they interact with the compromised element.
Affected Products
- Sante PACS Server: A medical imaging management system that is susceptible to cross-site scripting attacks, allowing for potential cookie theft and user redirection.
Mitigation
To mitigate this vulnerability, it is essential to implement input validation and output encoding to prevent the injection of malicious scripts. Regular updates and patches from the vendor should also be applied to ensure the system is protected against known vulnerabilities.