Skip to content
OpenAdvisories

Vendor

DSpace

15 known vulnerabilities.

Products

DSpace 15
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2022-31195 Public exploit

    Path traversal vulnerability in Simple Archive Format package import in DSpace

    DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF (simple archive format) pack…

    DSpace DSpace org.dspace:dspace-api Maven
  • High 7.1
    CVE-2022-31192 Public exploit

    Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a …

    DSpace DSpace org.dspace:dspace-jspui Maven
  • High 8.2
    CVE-2022-31194 Public exploit

    Path traversal vulnerabilities in DSpace JSPUI submission upload

    DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to m…

    DSpace DSpace org.dspace:dspace-jspui Maven