Who makes CIVR Connector?

CIVR Connector is published by Collaborative Imaging Technology. We hold no other store listing under the same registered identity.

Am I Being Pwned?

Log in Get started

Is CIVR Connector safe?

Q: Is CIVR Connector safe?

CIVR Connector is low risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Low risk

CIVR Connector accepts postMessage from any web page and uses it to auto-fill and submit DICOM viewer login credentials.

On PACS radiology pages, CIVR Connector listens for postMessage events without checking the sender's origin, so any page that can open one of these sites in a new window can send it a username and password to store. When the user next navigates to the DICOM viewer login page, the extension automatically fills in and submits whatever credentials it was sent, without confirming they came from the user's own device.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ci-chromedevv1.0.1.1Chrome Web Store

15Risk

Who publishes it

Collaborative Imaging Technology - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

ci-chromedev

Declared legal entity

Collaborative Imaging Technology

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.