Merge PACS Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in Merge PACS version 7.0. This vulnerability allows attackers to perform unauthorized actions by creating malicious HTML forms that target the merge-viewer endpoint. By submitting POST requests to the summary endpoint with login credentials, attackers can hijack user sessions and gain unauthorized access to the PACS system.

Impact

Exploitation of this vulnerability allows for cross-site request forgery, enabling attackers to perform actions on behalf of authenticated users.

Reproduction

To exploit this vulnerability, create an HTML form that includes the 'amicasUsername' and 'password' fields, along with a 'submitButton' field. The form should be submitted to the '/servlet/actions/merge-viewer/summary' endpoint. Include a valid JSESSIONID cookie to maintain the user session.