Security Advisory

CVE-2022-31192

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-01 20:30:36

Last updated 2025-04-23 17:55:14

Assigner GitHub_M

State PUBLISHED

Description

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this vulnerability.

← Browse all CVEs View on cve.org ↗