Vulnerabilities

TI-2021-19588 CVE-2021-43781 · GHSA-xr38-w74q-r8jv

Permissions not properly checked in Invenio-Drafts-Resources

LOW 30

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00684 Published 2021-12-06 Fixed in 0.13.7, 0.14.6 +4 CWE-862

TI-2019-16084 CVE-2019-1020006 · GHSA-94mf-xfg5-r247

LOW 29

invenio-app before 1.1.1 allows host header injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0093 Published 2019-07-29 Fixed in 1.1.1, 1.0.6 CWE-74

TI-2019-16083 CVE-2019-1020005 · GHSA-mfv8-q39f-mgfg

LOW 26

invenio-communities before 1.0.0a20 allows XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00682 Published 2019-07-29 Fixed in 1.0.0a20 CWE-79

TI-2019-16081 CVE-2019-1020003 · GHSA-vxh3-mvv7-265j

LOW 26

invenio-records before 1.2.2 allows XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00665 Published 2019-07-29 Fixed in 1.2.2, 1.0.2 +1 CWE-79

TI-2019-16097 CVE-2019-1020019 · GHSA-j9m2-6hq2-4r3c

LOW 29

invenio-previewer before 1.0.0a12 allows XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00899 Published 2019-07-29 Fixed in 1.0.0a12 CWE-79