Description
Santesoft LTD 的 Sante PACS Server 是符合 DICOM 3.0 的图片存档和通信系统，具有高性能和可靠性。Sante PACS Server.exe中存在路径遍历信息泄露漏洞。未经身份验证的远程攻击者可利用此漏洞下载安装该应用程序的磁盘驱动器上的任意文件。
Sante PACS Server /assets 信息泄露漏洞 （CVE-2025-2264）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-2264
https://www.tenable.com/plugins/nessus/234076
https://www.cve.org/CVERecord?id=CVE-2025-2264
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2264.yaml
https://ddpoc.com/DVB-2025-9987.html
https://www.sentinelone.com/vulnerability-database/cve-2025-2264/
https://access.redhat.com/security/cve/cve-2025-2264
https://osv.dev/vulnerability/CVE-2025-2264
https://cve.imfht.com/detail/CVE-2025-2264?lang=en
https://www.cisecurity.org/advisory/ms-isac-cybersecurity-advisory---multiple-vulnerabilities-in-sante-pacs-server-could-allow-for-remote-code-execution---patch-now---tlp-clear_2025-026