Skip to content
OpenAdvisories

Package · Maven

org.dspace:dspace-jspui

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.1
    CVE-2022-31192 Public exploit

    Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a …

  • High 8.2
    CVE-2022-31194 Public exploit

    Path traversal vulnerabilities in DSpace JSPUI submission upload

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to m…