Security Advisory

CVE-2023-7238

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-23 19:20:02

Last updated 2025-06-17 21:19:26

Assigner icscert

State PUBLISHED

Description

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victims browser.

← Browse all CVEs View on cve.org ↗