Description
MedDream PACS存在服务器端请求伪造漏洞，攻击者可以获取内网其他服务器敏感信息。
MedDream PACS存在服务器端请求伪造漏洞(CVE-2025-24485)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-24485
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2177
https://www.cvedetails.com/cve/CVE-2025-24485/
https://blog.talosintelligence.com/wwbn-meddream-eclipse-vulnerabilities/
https://www.sentinelone.com/vulnerability-database/cve-2025-24485/
https://cve.imfht.com/detail/CVE-2025-24485?lang=en
https://ddpoc.com/DVB-2025-9940.html
https://www.cnvd.org.cn/flaw/show/CNVD-2026-11743
https://github.com/advisories/GHSA-w28g-rm5j-24w5
https://cve.circl.lu/vuln/CVE-2025-24485