Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability

A directory traversal vulnerability allowing arbitrary file writes has been identified in Sante PACS Server. This issue arises from improper validation of user-supplied paths when parsing DCM files, enabling remote attackers to create files on the affected system without authentication. The vulnerability allows file creation in the context of the current user.

Impact

Exploitation of this vulnerability could lead to unauthorized file creation on the affected system, potentially allowing for further attacks or exploitation.

Remediation

Users can upgrade to Sante PACS Server version 4.0.10 to address this vulnerability.