Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes that redirect a user to a malicious webpage, potentially stealing the user’s cookies. This vulnerability poses a medium risk due to the required user interaction for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-54759 |
Exploitation
To exploit this vulnerability, an attacker must convince a user to interact with a malicious link or webpage. Once the user clicks on the link, the attacker can execute stored cross-site scripting, allowing them to inject harmful scripts that can steal session cookies or redirect the user to a malicious site.
Affected Products
- Sante PACS Server: A medical imaging and archiving solution that is susceptible to cross-site scripting attacks.
Mitigation
To mitigate this vulnerability, it is recommended to implement input validation and output encoding to prevent the injection of malicious scripts. Additionally, users should be educated about the risks of clicking on unknown links and the importance of maintaining updated software.