TI-2023-03848 CVE-2023-4159 · GHSA-7w47-jrjm-5gw5
Unrestricted Upload of File with Dangerous Type in omeka/omeka-s
Priority HIGH 73
Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.
omeka
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
omeka records in CISA KEVNo omeka vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Omeka S · all components
TI-2023-04206 CVE-2023-4560 · GHSA-qxg7-q87p-pgh2
Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
Priority MEDIUM 62
Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
TI-2023-03847 CVE-2023-4158 · GHSA-rjvg-3mg4-xmj6
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.
TI-2023-03846 CVE-2023-4157 · GHSA-fxc5-pr68-2px3
Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
Priority MEDIUM 57
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.
TI-2023-04207 CVE-2023-4561 · GHSA-j7q9-xpf4-q24f
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Priority MEDIUM 55
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.