Skip to content
OpenAdvisories

Package · Maven

org.dspace:dspace-jspui

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2022-31192 Public exploit

    Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a …

    DSpace DSpace org.dspace:dspace-jspui Maven
  • High 7.1
    CVE-2022-31191

    Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI spellcheck "Did you mean" HTML escapes the data-spell attribute in the link, but not the actual di…

    DSpace DSpace org.dspace:dspace-jspui Maven
  • High 8.2
    CVE-2022-31194 Public exploit

    Path traversal vulnerabilities in DSpace JSPUI submission upload

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to m…

    DSpace DSpace org.dspace:dspace-jspui Maven
  • High 7.1
    CVE-2022-31193

    URL Redirection to Untrusted Site in Dspace JSPUI

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craf…

    DSpace DSpace org.dspace:dspace-jspui Maven