Sante PACS Server is vulnerable to stored cross-site scripting, allowing attackers to inject malicious HTML code. This can redirect users to harmful webpages and potentially steal their cookies. The vulnerability poses a risk to user confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-54759 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious HTML payload and find a way to inject it into the Sante PACS Server. This typically requires user interaction, as the victim must visit a page where the malicious code is executed, leading to cookie theft or redirection to a malicious site.
Affected Products
- Sante PACS Server: A medical imaging management system that is susceptible to stored cross-site scripting attacks.
Mitigation
To mitigate this vulnerability, it is recommended to implement input validation and output encoding to prevent the injection of malicious scripts. Regular updates and patches from the vendor should also be applied to ensure the system is protected against known vulnerabilities.