Duraspace vulnerabilities

Products

• Dspace 9

Newest

• dspace Path traversal vulnerability in Simple Archive Format package import in DSpace CVE-2022-31195 Public exploitFix available 7.2 HighAugust 1, 2022
• dspace Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature CVE-2022-31192 Public exploitFix available 7.1 HighAugust 1, 2022
• dspace Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools CVE-2022-31191 Fix available 7.1 HighAugust 1, 2022
• dspace Path traversal vulnerabilities in DSpace JSPUI submission upload CVE-2022-31194 Public exploitFix available 8.2 HighAugust 1, 2022
• dspace URL Redirection to Untrusted Site in Dspace JSPUI CVE-2022-31193 Fix available 7.1 HighAugust 1, 2022
• dspace "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization CVE-2022-31189 Fix available 5.3 MediumAugust 1, 2022
• dspace Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI CVE-2022-31190 Fix available 5.3 MediumAugust 1, 2022
• dspace Communities and collections administrators can escalate their privilege up to system administrator CVE-2021-41189 Fix available 7.2 HighOctober 29, 2021
• duraspace vitro Command Injection in VIVO Vitro CVE-2019-6986 Fix available 7.5 HighJanuary 28, 2019
• duraspace dspace High severity vulnerability that affects org.dspace:dspace-xmlui CVE-2016-10726 Public exploitFix available 7.5 HighJuly 10, 2018