DS
Product
Dspace
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Dspace to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10726 | 7.5 | Jul 10 | The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a… Affected: before 3.6; 4.0 before 4.5; 5.0 before 5.5 |
| CVE-2022-31195 | 7.2 | Aug 1 | Path traversal vulnerability in Simple Archive Format package import in DSpace Affected: 4.0 through 5.10; after 6.0 before 6.4 |
| CVE-2022-31194 | 7.2 | Aug 1 | Path traversal vulnerabilities in DSpace JSPUI submission upload Affected: 4.0 through 5.10; after 6.0 before 6.4 |
| CVE-2021-41189 | 7.2 | Oct 29 | DSpace is an open source turnkey repository application Affected: 7.0 |
| CVE-2022-31192 | 6.1 | Aug 1 | Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature Affected: 4.0 through 5.10; after 6.0 before 6.4 |
| CVE-2022-31191 | 6.1 | Aug 1 | Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools Affected: after 4.0 through 5.10; after 6.0 before 6.4 |
| CVE-2022-31193 | 6.1 | Aug 1 | URL Redirection to Untrusted Site in Dspace JSPUI Affected: 4.0 through 5.10; after 6.0 before 6.4 |
| CVE-2022-31189 | 5.3 | Aug 1 | "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization Affected: after 4.0 before 6.4 |
| CVE-2022-31190 | 5.3 | Aug 1 | Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI Affected: 4.0 before 6.4 |
Showing 9