TI-2023-03696 CVE-2023-3981 · GHSA-g7wc-6rh5-cx62
Server-Side Request Forgery (SSRF) in omeka/omeka-s
Priority MEDIUM 56
Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.
omeka
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
omeka records in CISA KEVNo omeka vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Omeka · all components
TI-2023-03697 CVE-2023-3982 · GHSA-8pv7-5xq4-wmx9
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Priority MEDIUM 55
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
TI-2023-03695 CVE-2023-3980 · GHSA-rf79-4hq7-3p9q
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Priority MEDIUM 55
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
TI-2014-04171 CVE-2014-5100 · GHSA-7559-3vv2-j6vq
Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow…
Priority LOW 35
Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new super user account via a request to a…
TI-2021-08438 CVE-2021-26799 · GHSA-p9cm-p38f-27vm
Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7…
Priority LOW 29
Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script or HTML.
TI-2018-09658 CVE-2018-13423 · GHSA-cvhf-p4w4-g3gm
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.
Priority LOW 29
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.