| Package | Affected versions | Patched versions |
|---|---|---|
| osimis web viewer | = 1.4.2.0-9d9eff4 |
A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free