partywavesec/invesalius3_vulnerabilities

partywavesec/invesalius3_vulnerabilities

GitHubGitHub
GitHubgithub.com
www.partywave.sitewww.partywave.site
Releases0
Stars3
InVesalius discovered CVE. CVE-2024-42845, CVE-2024-44825
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-44825↗
7.5 HIGH—

Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrary files unto the system via a crafted .inv3 file.

CVE-2024-42845↗
8 HIGH—

An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file.