VULNERABILITY INTELLIGENCE

CVE-2023-7238

CVSS score7.1 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Description

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-79
  • nvd@nist.gov: CWE-79

Primary references