← Back to CVE List

CVE-2023-7238

Published: 2024-01-23T20:15Z
Last Modified: 2024-11-21T08:45Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt