Vulnerabilities > Orthanc Server > Osimis WEB Viewer

DATE CVE VULNERABILITY TITLE RISK
2024-01-23 CVE-2023-7238 Cross-site Scripting vulnerability in Orthanc-Server Osimis web Viewer 1.4.2.09D9Eff4
A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered.
network
low complexity
orthanc-server CWE-79
6.1