pynetdicom Library vulnerabilities
1 known vulnerability in pynetdicom Library from Pydicom. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest first
- 9.1 Critical severity
pynetdicom Library: Improper Limitation of a Pathname to a Restricted Directory
The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.