Skip to content
OpenAdvisories

Package · Maven

io.goobi.viewer:viewer-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-29016

    Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames

    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user a…

    intranda goobi-viewer-core io.goobi.viewer:viewer-core Maven
  • Medium 6.1
    CVE-2023-29015

    Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments

    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core prior to version 23.03. An attacker could create a…

    intranda goobi-viewer-core io.goobi.viewer:viewer-core Maven
  • Medium 6.1
    CVE-2023-29014

    Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter

    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attac…

    intranda goobi-viewer-core io.goobi.viewer:viewer-core Maven