Beveiligingsadvies

CVE-2022-31192

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-01 20:30:36

Laatst bijgewerkt 2025-04-23 17:55:14

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗