CVE-2025-57787
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.6.870 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-57787 is a reflected cross-site scripting (XSS) vulnerability in the modifyRoute functionality of MedDream PACS Premium version 7.3.6.870. It occurs because the 'source' parameter in the Pacs/modifyRoute.php script is included in the HTML output without proper sanitization. If an attacker provides a specially crafted URL with a malicious 'source' parameter that does not exist in the database, this value is displayed in an error message within the HTML response, allowing arbitrary JavaScript code to execute in the victim's browser. This can be exploited without authentication by tricking a user into visiting a malicious URL. [1]
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser when they visit a maliciously crafted URL. This can lead to theft of sensitive information such as session tokens, user credentials, or other data accessible via the browser. It may also enable actions on behalf of the user, such as performing unauthorized operations within the application. Since the vulnerability is pre-authentication and reflected, it can be exploited by social engineering or phishing attacks, potentially compromising user accounts and data confidentiality and integrity. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending specially crafted HTTP GET requests to the vulnerable endpoint and observing if the response reflects the injected script without proper sanitization. For example, you can use curl to send a request like: curl -i 'http://<target>/Pacs/modifyRoute.php?source=<script>alert(1)</script>&destination=ZZZ&keytag=111' and check if the response contains the injected <script>alert(1)</script> code executed or reflected in the HTML output. This indicates the presence of the reflected XSS vulnerability. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to apply the vendor patch released on 2025-12-05 for MedDream PACS Premium version 7.3.6.870. Until the patch is applied, restrict access to the vulnerable modifyRoute functionality if possible, and monitor for suspicious requests that include script tags in the 'source' parameter to detect exploitation attempts. [1]