Vulnerabilities

TI-2023-03848 CVE-2023-4159 · GHSA-7w47-jrjm-5gw5

Unrestricted Upload of File with Dangerous Type in omeka/omeka-s

HIGH 73

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00995 Published 2023-08-04 Fixed in 4.0.3 CWE-434

TI-2023-03847 CVE-2023-4158 · GHSA-rjvg-3mg4-xmj6

Cross-site Scripting (XSS) - Stored in omeka/omeka-s

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00465 Published 2023-08-04 Fixed in 4.0.3 CWE-79

TI-2023-03846 CVE-2023-4157 · GHSA-fxc5-pr68-2px3

Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s

MEDIUM 57

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00514 Published 2023-08-04 Fixed in 4.0.3 CWE-74

Vulnerabilities

Filters

Unrestricted Upload of File with Dangerous Type in omeka/omeka-s

Cross-site Scripting (XSS) - Stored in omeka/omeka-s

Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s