CVE-2025-53854
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.6.870 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-53854 is a reflected cross-site scripting (XSS) vulnerability in the modifyHL7Route functionality of MedDream PACS Premium version 7.3.6.870. It occurs because the 'source' parameter from the URL query string is embedded directly into the HTML output without sanitization or encoding. If an attacker provides a specially crafted URL with malicious JavaScript code in the 'source' parameter, this code is reflected in an error message and executed in the victim's browser, allowing arbitrary JavaScript execution. [1]
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary JavaScript code in the context of a victim's browser when they visit a maliciously crafted URL. This can lead to theft of sensitive information such as session cookies, user credentials, or other data accessible via the browser, potentially enabling further attacks like session hijacking or unauthorized actions within the application. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending specially crafted HTTP GET requests to the modifyHL7Route.php endpoint with malicious payloads in the 'source' parameter and observing if the response reflects the injected script without sanitization. For example, you can use curl to test this: curl -i "http://<target>/Pacs/modifyHL7Route.php?source=<script>alert(1)</script>&destination=ZZZ&keyname=VVV" and check if the response contains the injected script tag. Detection involves verifying if the 'source' parameter is echoed back unsanitized in the HTML response, indicating vulnerability to reflected XSS. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the vendor's patch released on December 5, 2025, which addresses this vulnerability. Until the patch is applied, restrict access to the affected modifyHL7Route.php functionality, implement web application firewall (WAF) rules to block requests containing suspicious script tags in the 'source' parameter, and educate users to avoid clicking on untrusted URLs. Additionally, ensure input validation and output encoding are enforced to prevent script injection. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.