CVE-2018-25298 | Merge PACS 7.0 POST Request summary cross-site request forgery (Exploit 44681 / EDB-44681)

April 30, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Merge PACS 7.0. This affects an unknown part of the file /servlet/actions/merge-viewer/summary of the component POST Request Handler. Executing a manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2018-25298. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More