org.dspace:dspace-jspui vulnerabilities (Maven)

5 vulnerabilities.

• org.dspace:dspace-jspui Maven Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature CVE-2022-31192 Public exploitFix available 7.1 HighAugust 1, 2022
• org.dspace:dspace-jspui Maven Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools CVE-2022-31191 Fix available 7.1 HighAugust 1, 2022
• org.dspace:dspace-jspui Maven Path traversal vulnerabilities in DSpace JSPUI submission upload CVE-2022-31194 Public exploitFix available 8.2 HighAugust 1, 2022
• org.dspace:dspace-jspui Maven URL Redirection to Untrusted Site in Dspace JSPUI CVE-2022-31193 Fix available 7.1 HighAugust 1, 2022
• org.dspace:dspace-jspui Maven "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization CVE-2022-31189 Fix available 5.3 MediumAugust 1, 2022