CVE-2025-2264 Santesoft Sante PACS Server Path Traversal Information Disclosure
An unauthenticated remote attacker can exploit a path traversal flaw in Sante PACS Server to download arbitrary files from the server's disk.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2264?
CVE-2025-2264 is a high-severity path traversal vulnerability in Santesoft Sante PACS Server, published on 13 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.
Weakness: CWE-22
Which versions are affected by CVE-2025-2264?
It affects 1 product.
Products include Santesoft Sante Pacs Server.
How do I fix CVE-2025-2264?
No fix has been published for CVE-2025-2264 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-2264 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-2264 exists.
Public exploit code: 1 Metasploit module and 1 Nuclei template.
Other vulnerabilities in Santesoft Sante PACS Server
- CVE-2025-2263 Santesoft Sante PACS Server Stack-based Buffer Overflow
- CVE-2023-51637 Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability
- CVE-2024-1863 Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability
- CVE-2022-2272 SQL injection in PACS Server
- CVE-2025-54156 Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information
Sources
Also known as GHSA-xrc3-9jj6-mqcm.