Duraspace / Dspace
9 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2022-31195 | Path traversal vulnerability in Simple Archive Format package import in DSpace | HIGH | 7.2 | Aug 1, 2022 |
| CVE-2022-31192 | Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature | HIGH | 7.1 | Aug 1, 2022 |
| CVE-2022-31191 | Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools | HIGH | 7.1 | Aug 1, 2022 |
| CVE-2022-31194 | Path traversal vulnerabilities in DSpace JSPUI submission upload | HIGH | 8.2 | Aug 1, 2022 |
| CVE-2022-31193 | URL Redirection to Untrusted Site in Dspace JSPUI | HIGH | 7.1 | Aug 1, 2022 |
| CVE-2022-31189 | "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization | MEDIUM | 5.3 | Aug 1, 2022 |
| CVE-2022-31190 | Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI | MEDIUM | 5.3 | Aug 1, 2022 |
| CVE-2021-41189 | Communities and collections administrators can escalate their privilege up to system administrator | HIGH | 7.2 | Oct 29, 2021 |
| CVE-2016-10726 | The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitr… | HIGH | 7.5 | Jul 10, 2018 |
Showing 1 to 9 of 9 CVEs