CVE-2025-57786
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.6.870 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-57786 is a reflected cross-site scripting (XSS) vulnerability in the notifynewstudy functionality of MedDream PACS Premium version 7.3.6.870. It occurs because the 'user' parameter from an HTTP GET request is not sanitized before being included in the HTML output. If the specified user does not exist, the unsanitized input is embedded in an error message, allowing an attacker to inject and execute arbitrary JavaScript code in the victim's browser by crafting a malicious URL. [1]
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary JavaScript code in the context of a victim's browser when they access a specially crafted URL. This can lead to theft of sensitive information, session hijacking, or other malicious actions performed on behalf of the victim. Since MedDream PACS Premium manages medical images and related data, exploitation could compromise confidentiality and integrity of sensitive medical information. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending specially crafted HTTP GET requests to the notifynewstudy.php script with the 'user' parameter containing JavaScript code, and observing if the response reflects the injected script without sanitization. For example, you can use curl to test this: curl -i 'http://<target>/Pacs/notifynewstudy.php?user=<script>alert(1)</script>&uid=123' and check if the response HTML contains the injected <script>alert(1)</script> code. If the script is reflected and executed in a browser, the vulnerability exists. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the vendor's patch released on December 5, 2025, which addresses this vulnerability. Until the patch is applied, restrict access to the vulnerable notifynewstudy.php endpoint, implement web application firewall (WAF) rules to block requests containing suspicious script tags in the 'user' parameter, and educate users to avoid clicking on untrusted URLs that may exploit this vulnerability. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not specify how this reflected XSS vulnerability in MedDream PACS Premium affects compliance with common standards and regulations such as GDPR or HIPAA.