← Advisories

Horos 2.1.0 Web Portal Remote Information Disclosure Exploit

High
Advisory ID
ZSL-2016-5387
Release Date
16 December 2016
Vendor
Affected Version
2.1.0
CVE
N/A
Tested On
macOS 12.10.2 (Sierra), macOS 12.10.1 (Sierra)
Summary

Horos™ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical image viewer for OS X. Horos is based upon OsiriX and other open source medical imaging libraries.

Description

Horos suffers from a file disclosure vulnerability when input passed thru the URL path is not properly verified before being used to read files. This can be exploited to include files from local resources with directory traversal attacks.

Proof of Concept
Disclosure Timeline
15.12.2016Vendor informed.
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
16.12.2016Initial release
20.12.2016Added reference [1], [2] and [3]
24.12.2016Added reference [4]