dspace Latest Vulnerabilities

Latest vulnerabilities published by dspace

JSON RSS CSV 🔔 Create Alert Trigger

15 July 2025

Path Traversal Vulnerability in DSpace Open Source Repository Software
CVE-2025-53622
DspaceDspace5.2MEDIUM
XML External Entity Injection Vulnerability in DSpace Repository Software
CVE-2025-53621
DspaceDspace6.9MEDIUM

26 June 2024

DSpace Vulnerability: XSS Risk in HTML, XML, and JavaScript Bitstreams
CVE-2024-38364
DSpace

1 August 2022

Path traversal vulnerability in Simple Archive Format package import in DSpace
CVE-2022-31195
DspaceDspace7.2HIGH
Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature
CVE-2022-31192
DspaceDspace7.1HIGH
Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools
CVE-2022-31191
DspaceDspace7.1HIGH
Path traversal vulnerabilities in DSpace JSPUI submission upload
CVE-2022-31194
DspaceDspace8.2HIGH
URL Redirection to Untrusted Site in Dspace JSPUI
CVE-2022-31193
DspaceDspace7.1HIGH
"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization
CVE-2022-31189
DspaceDspace5.3MEDIUM
Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI
CVE-2022-31190
DspaceDspace5.3MEDIUM

29 October 2021

Communities and collections administrators can escalate their privilege up to system administrator
CVE-2021-41189
DspaceDspace7.2HIGH