Login Request a demo
DS
Product
Dspace
by Duraspace · last CVE Aug 1, 2022
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 4Medium 5Low 0
Severity
All severities9Critical0High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dspace to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31192
6.1
1%
Aug 1
Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature
Affected: 4.0 through 5.10; after 6.0 before 6.4
CVE-2022-31191
6.1
1%
Aug 1
Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools
Affected: after 4.0 through 5.10; after 6.0 before 6.4
CVE-2022-31193
6.1
1%
Aug 1
URL Redirection to Untrusted Site in Dspace JSPUI
Affected: 4.0 through 5.10; after 6.0 before 6.4
CVE-2022-31189
5.3
1%
Aug 1
"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization
Affected: after 4.0 before 6.4
CVE-2022-31190
5.3
1%
Aug 1
Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI
Affected: 4.0 before 6.4
Showing 5