Skip to content
OpenAdvisories
Medium · 5.2 CVE-2023-4157 EUVD-2023-2282GHSA-fxc5-pr68-2px3

Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s

Published Aug 4, 2023 · Updated Oct 9, 2024 · Assigned by @huntrdev

Description

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.

Affected products

VendorProductAffectedFixed
omeka omeka/omeka-s unspecified – < 4.0.3 4.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist omeka/omeka-s < 4.0.3 4.0.3 GHSA-fxc5-pr68-2px3

References