Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC2

CVE-2025-24485

CVSS 3.1
7.5 high
EPSS
9%p95
Published
·
Modified
Analyze CVE-2025-24485 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Vendors
meddream
Products
pacs server
Weakness
CWE-918
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (8.9%)

In the news

1 story