This vulnerability involves SSRF in the OHIF DICOM Web Viewer Framework where two data sources (DICOMWebProxy and DICOMJSON) accept arbitrary URL parameters without validation. The global authentication service automatically injects the authenticated user's OIDC Bearer token into these requests, which can be sent to attacker-controlled servers. This could lead to unauthorized access or token leakage. The vulnerability does not affect DICOMweb data sources. No official fix or patch is currently documented.

An attacker can exploit this SSRF vulnerability to cause the server to make arbitrary HTTP requests with the authenticated user's OIDC Bearer token included. This could lead to token leakage to attacker-controlled endpoints, potentially enabling unauthorized access to protected resources or services. The vulnerability affects the confidentiality of authentication tokens and may facilitate further attacks leveraging these credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting the use of the affected data sources (DICOMWebProxy and DICOMJSON) or implement strict URL validation and filtering to prevent arbitrary URL fetching. Monitor vendor communications for updates on patches or official mitigations.