Skip to content
OpenAdvisories

Package · Maven

org.vivoweb:vitro-project

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2019-6986

    Command Injection in VIVO Vitro

    SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service (ReDoS), as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request.

    org.vivoweb:vitro-project Maven