dspace Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by dspace

JSON RSS CSV 🔔 Create Alert Trigger

1 August 2022

Path traversal vulnerability in Simple Archive Format package import in DSpace
CVE-2022-31195
DspaceDspace7.2HIGH
Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature
CVE-2022-31192
DspaceDspace7.1HIGH
Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools
CVE-2022-31191
DspaceDspace7.1HIGH
Path traversal vulnerabilities in DSpace JSPUI submission upload
CVE-2022-31194
DspaceDspace8.2HIGH
URL Redirection to Untrusted Site in Dspace JSPUI
CVE-2022-31193
DspaceDspace7.1HIGH

29 October 2021

Communities and collections administrators can escalate their privilege up to system administrator
CVE-2021-41189
DspaceDspace7.2HIGH