Sante PACS Server
Moderate fix1 remedy
cpe:2.3:a:santesoft:sante_pacs_server:*:*:*:*:*:*:*
Moderate fix1 remedy
Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability
Vulnerability
Patched
A directory traversal vulnerability allowing arbitrary file writes has been identified in the Sante PACS Server Web Portal. This issue arises from improper validation of user-supplied paths when parsing DCM files, enabling authenticated remote attackers to create files on the server in the context of the current user.
Impact
Exploitation of this vulnerability allows for arbitrary file creation on the affected server.
Remediation
Users can upgrade to Sante PACS Server version 4.0.10 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.8impact
2.5exploitability
4.9remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.