[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 07:43 UTC
Importiert: 2026-10-20 20:24 UTC
Quelle-ID: full_disc
uid_hash: 874ba54bdcc53d5bc58c917f6ca117ffd3d56a68da37cfbc4c06fa491194699a

Full Disclosure

Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-080

Product: dcm4che

Manufacturer: J4Care

Affected Version(s): 5.35.0

Tested Version(s): 5.35.0

Vulnerability Type: Improper Limitation of a Pathname to a

Restricted Directory (CWE-22)

Risk Level: High

Solution Status: Open

Manufacturer Notification: 2026-08-06

Public Disclosure: 2026-10-13

CVE Reference: Not yet...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss