The Sante PACS Server web portal is vulnerable to stored cross-site scripting (XSS). An attacker could inject malicious HTML code that redirects users to a malicious webpage, potentially stealing their cookies. This vulnerability poses a risk to user confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2025-54862 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious HTML payload and inject it into the Sante PACS Server web portal. Once a user interacts with the compromised portal, the malicious code executes, redirecting the user to a malicious site where their cookies can be captured.
Affected Products
- Sante PACS Server: A web-based medical imaging solution that allows users to manage and view medical images.
Mitigation
To mitigate this vulnerability, it is recommended to implement input validation and output encoding to prevent the injection of malicious scripts. Regularly updating the software and applying security patches can also help protect against such vulnerabilities.