Vulnerabilities

TI-2022-13235 CVE-2022-31195 · GHSA-8rmh-55h4-93h5

Path traversal vulnerability in Simple Archive Format package import in DSpace

LOW 38

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01968 Published 2022-08-01 Fixed in 6.4, 5.11 CWE-22

TI-2022-13232 CVE-2022-31192 · GHSA-4wm8-c2vv-xrpq

Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature

LOW 33

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00791 Published 2022-08-01 Fixed in 6.4, 5.11 CWE-79

TI-2022-13231 CVE-2022-31191 · GHSA-c558-5gfm-p2r8

Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools

LOW 33

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00808 Published 2022-08-01 Fixed in 6.4, 5.11 CWE-79

TI-2022-13234 CVE-2022-31194 · GHSA-qp5m-c3m9-8q2p

Path traversal vulnerabilities in DSpace JSPUI submission upload

LOW 39

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1HIGH 8.2 Network High privileges No interaction EPSS 0.01464 Published 2022-08-01 Fixed in 6.4, 5.11 CWE-22

TI-2022-13233 CVE-2022-31193 · GHSA-763j-q7wv-vf3m

URL Redirection to Untrusted Site in Dspace JSPUI

LOW 33

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00885 Published 2022-08-01 Fixed in 6.4, 5.11 CWE-601

TI-2022-13229 CVE-2022-31189 · GHSA-c2j7-66m3-r4ff

"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization

LOW 31

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00723 Published 2022-08-01 Fixed in 6.4 CWE-209

TI-2022-13230 CVE-2022-31190 · GHSA-7w85-pp86-p4pq

Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI

LOW 32

DSpace open source software is a repository application which provides durable access to digital resources.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00921 Published 2022-08-01 Fixed in 6.4 CWE-200

TI-2021-18028 CVE-2021-41189 · GHSA-cf2j-vf36-c6w8

Communities and collections administrators can escalate their privilege up to system administrator

LOW 36

DSpace is an open source turnkey repository application.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02056 Published 2021-10-29 Fixed in 7.1 CWE-863

TI-2016-08766 CVE-2016-10726 · GHSA-4m9r-5gqp-7j82

The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows…

LOW 38

The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02892 Published 2018-07-10 Fixed in 4.5, 5.5 +1 CWE-22

Vulnerabilities

Filters