BaseFortify

Executive Summary

CVE-2025-57787 is a reflected cross-site scripting (XSS) vulnerability in the modifyRoute functionality of MedDream PACS Premium version 7.3.6.870. It occurs because the 'source' parameter in the Pacs/modifyRoute.php script is included in the HTML output without proper sanitization. If an attacker provides a specially crafted URL with a malicious 'source' parameter that does not exist in the database, this value is displayed in an error message within the HTML response, allowing arbitrary JavaScript code to execute in the victim's browser. This can be exploited without authentication by tricking a user into visiting a malicious URL. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser when they visit a maliciously crafted URL. This can lead to theft of sensitive information such as session tokens, user credentials, or other data accessible via the browser. It may also enable actions on behalf of the user, such as performing unauthorized operations within the application. Since the vulnerability is pre-authentication and reflected, it can be exploited by social engineering or phishing attacks, potentially compromising user accounts and data confidentiality and integrity. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by sending specially crafted HTTP GET requests to the vulnerable endpoint and observing if the response reflects the injected script without proper sanitization. For example, you can use curl to send a request like: curl -i 'http://<target>/Pacs/modifyRoute.php?source=<script>alert(1)</script>&destination=ZZZ&keytag=111' and check if the response contains the injected <script>alert(1)</script> code executed or reflected in the HTML output. This indicates the presence of the reflected XSS vulnerability. [1]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate step to mitigate this vulnerability is to apply the vendor patch released on 2025-12-05 for MedDream PACS Premium version 7.3.6.870. Until the patch is applied, restrict access to the vulnerable modifyRoute functionality if possible, and monitor for suspicious requests that include script tags in the 'source' parameter to detect exploitation attempts. [1]

Useful 0 Not Useful 0