Skip to content
OpenAdvisories

Vendor

Scripta

5 known vulnerabilities.

Products

eScriptorium 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-18258

    Authorization Bypass Through User-Controlled Key in eScriptorium

    Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys sup…

    Scripta eScriptorium
  • High 7.1
    CVE-2026-18277

    Missing Authorization in eScriptorium

    Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST r…

    Scripta eScriptorium
  • High 8.5
    CVE-2026-18359

    Server-Side Request Forgery (SSRF) in eScriptorium

    Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metadata service, …

    Scripta eScriptorium