org.dspace:dspace-api vulnerabilities (Maven)
8 vulnerabilities.
-
org.dspace:dspace-apiMaven DSpace: Path Traversal possible in LDN message generation 5.5 Medium -
org.dspace:dspace-apiMaven DSpace: ORE resource URI does not validate scheme for non-web resources 4.4 Medium -
org.dspace:dspace-apiMaven DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability) 5.5 Medium -
org.dspace:dspace-apiMaven DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN 8.0 High -
org.dspace:dspace-apiMaven DSpace has path traversal vulnerability in Simple Archive Format (SAF) package import via contents file 5.2 Medium -
org.dspace:dspace-apiMaven DSpace vulnerable to XML External Entity (XXE) injection in import via Simple Archive Format (SAF) or import from external sources 6.9 Medium -
org.dspace:dspace-apiMaven Path traversal vulnerability in Simple Archive Format package import in DSpace 7.2 High -
org.dspace:dspace-apiMaven Communities and collections administrators can escalate their privilege up to system administrator 7.2 High