CVE-2018-25113

Dicoogle PACS Web Server 2.5.0 Unauthenticated Path Traversal

CVSS 8.7 HIGHEPSS 1.2%CWE-22

Vexday Risk Score

36Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 8.7EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

11 Jul 2018Metasploit module available

23 Jul 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An unauthenticated path traversal vulnerability exists in Dicoogle PACS Web Server version 2.5.0 and possibly earlier. The vulnerability allows remote attackers to read arbitrary files on the underlying system by sending a crafted request to the /exportFile endpoint using the UID parameter. Successful exploitation can reveal sensitive files accessible by the web server user.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Dicoogle Project · PACS Web Server

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/dicoogle_traversal.rb https://www.exploit-db.com/exploits/45007 https://www.fortiguard.com/encyclopedia/ips/46527/dicoogle-pacs-web-server-directory-traversal https://www.vulncheck.com/advisories/dicoogle-pacs-web-server-path-traversal