File Overwriting Vulnerability in Orthanc by Ifc0
CVE-2023-33466

8.8HIGH

Key Information:

Vendor: Orthanc-server
Status: Orthanc
Vendor: CVE Published:; 29 June 2023

🔔 Create Orthanc-server Vulnerability Alert

What is CVE-2023-33466?

A flaw in Orthanc versions prior to 1.12.0 enables authenticated users with access to the Orthanc API to overwrite arbitrary files on the system. In certain configurations, this vulnerability can lead to the overwriting of critical configuration files, potentially enabling attackers to execute remote code, hence compromising the integrity and security of the affected deployments.