CVE-2025-58080
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.6.870 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-58080 is a reflected cross-site scripting (XSS) vulnerability in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. It occurs because the 'name' parameter in the Pacs/modifyHL7App.php script is included in the HTML output without proper sanitization. If an attacker provides a specially crafted URL with malicious JavaScript code in the 'name' parameter, and this name does not exist in the database, the application returns an error message embedding the unsanitized input directly into the HTML response. This allows arbitrary JavaScript code execution in the victim's browser when they interact with the crafted URL. The vulnerability requires user authentication and user interaction to be exploited. [1]
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary JavaScript code in the context of a user's browser session after the user interacts with a malicious URL. This can lead to theft of sensitive information, session hijacking, or performing actions on behalf of the user within the MedDream PACS application. Since the application manages medical images and related data, exploitation could compromise confidentiality and integrity of sensitive medical information, potentially leading to unauthorized access or manipulation of patient data. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by testing the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870 for reflected cross-site scripting (XSS) in the "name" parameter. A practical approach is to send a specially crafted URL with a script tag or other XSS payload in the "name" parameter to the Pacs/modifyHL7App.php endpoint and observe if the payload is executed or reflected unsanitized in the HTML response. For example, you can use curl or a web proxy tool to send a request like: curl -i -k 'https://<target>/Pacs/modifyHL7App.php?name=%3Cscript%3Ealert(1)%3C/script%3E' and check if the script executes or appears in the response. Note that user authentication is required to access this functionality, so you must authenticate first or include session cookies in your requests. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to apply the vendor's patch released on December 5, 2025, which addresses this vulnerability by properly sanitizing the "name" parameter in the modifyHL7App functionality. Until the patch is applied, restrict access to the affected functionality to trusted users only, monitor for suspicious activity, and educate users about the risk of clicking on untrusted URLs. Additionally, consider implementing web application firewall (WAF) rules to detect and block malicious payloads targeting the "name" parameter in requests to Pacs/modifyHL7App.php. [1]