Invesalius vulnerabilities
We track 2 vulnerabilities in Invesalius products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2024.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Invesalius vulnerabilities
- 7.5 High severity
invesalius: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Centro de Tecnologia da Informaco Renato Archer InVesalius3 v3.1.99995 allows attackers to write arbitrary files unto the system via a crafted .inv3 file.
- 8.0 High severity
invesalius: Improper Control of Generation of Code
An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file.