Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31176 State: PUBLISHED Published: 2022-09-02T00:00:00.000Z Last Updated: 2025-04-23T17:32:35.024Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: grafana Products: grafana-image-renderer Problem Types: CWE-200 Description: Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser (Chromium/Chrome). An internal security review identified an unauthorized file disclosure vulnerability. It is possible for a malicious user to retrieve unauthorized files under some network conditions or via a fake datasource (if user has admin permissions in Grafana). All Grafana installations s
some network conditions or via a fake datasource (if user has admin permissions in Grafana). All Grafana installations should be upgraded to version 3.6.1 as soon as possible. As a workaround it is possible to [disable HTTP remote rendering](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#plugingrafana-image-renderer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grafana/grafana-image-renderer/security/advisories/GHSA-2cfh-233g-m4c5 - https://github.com/grafana/grafana-image-renderer/pull/364 - https://security.netapp.com/advisory/ntap-20221209-0004/
CVE ID: CVE-2022-31177 State: PUBLISHED Published: 2022-08-01T19:05:11.000Z Last Updated: 2025-04-23T17:56:34.614Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: dpgaspar Products: Flask-AppBuilder Problem Types: CWE-200 Description: Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The response would not include the hashed passwords, but an attacker could infer partial password hashes and their respective users. This issu
include the hashed passwords, but an attacker could infer partial password hashes and their respective users. This issue has been fixed in version 4.1.3. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc - https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3
CVE ID: CVE-2022-31178 State: PUBLISHED Published: 2022-08-01T19:10:11.000Z Last Updated: 2025-04-23T17:56:28.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-863 Description: eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/adv
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x
CVE ID: CVE-2022-31179 State: PUBLISHED Published: 2022-08-01T19:20:18.000Z Last Updated: 2025-04-22T17:46:08.799Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: ericcornelissen Products: shescape Problem Types: CWE-74 Description: Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape (any API function) to escape arguments for cmd.exe on Windows An attacker can omit all arguments following their input by including a line feed character (`'\n'`) in the payload. This bug has been patched in [v1.5.8] which you can upgrade to now. No further cha
ed character (`'\n'`) in the payload. This bug has been patched in [v1.5.8] which you can upgrade to now. No further changes are required. Alternatively, line feed characters (`'\n'`) can be stripped out manually or the user input can be made the last argument (this only limits the impact). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ericcornelissen/shescape/releases/tag/v1.5.8 - https://github.com/ericcornelissen/shescape/security/advisories/GHSA-jjc5-fp7p-6f8w - https://github.com/ericcornelissen/shescape/pull/332
CVE ID: CVE-2022-31180 State: PUBLISHED Published: 2022-08-01T19:15:16.000Z Last Updated: 2025-04-22T17:46:22.040Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ericcornelissen Products: shescape Problem Types: CWE-74 Description: Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation` option set to `true`. The result is that if an attacker is able to include whitespace in their input they can: 1. Invoke shell-specific behaviour through shell-specific s
acker is able to include whitespace in their input they can: 1. Invoke shell-specific behaviour through shell-specific special characters inserted directly after whitespace. 2. Invoke shell-specific behaviour through shell-specific special characters inserted or appearing after line terminating characters. 3. Invoke arbitrary commands by inserting a line feed character. 4. Invoke arbitrary commands by inserting a carriage return character. Behaviour number 1 has been patched in [v1.5.7] which you can upgrade to now. No further changes are required. Behaviour number 2, 3, and 4 have been patched in [v1.5.8] which you can upgrade to now. No further changes are required. The best workaround is
d 4 have been patched in [v1.5.8] which you can upgrade to now. No further changes are required. The best workaround is to avoid having to use the `interpolation: true` option - in most cases using an alternative is possible, see [the recipes](https://github.com/ericcornelissen/shescape#recipes) for recommendations. Alternatively, users may strip all whitespace from user input. Note that this is error prone, for example: for PowerShell this requires stripping `'\u0085'` which is not included in JavaScript's definition of `\s` for Regular Expressions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ericcornelissen/shescape/security/
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ericcornelissen/shescape/security/advisories/GHSA-44vr-rwwj-p88h - https://github.com/ericcornelissen/shescape/pull/322 - https://github.com/ericcornelissen/shescape/pull/324 - https://github.com/ericcornelissen/shescape/releases/tag/v1.5.7 - https://github.com/ericcornelissen/shescape/releases/tag/v1.5.8
CVE ID: CVE-2022-31181 State: PUBLISHED Published: 2022-08-01T19:30:16.000Z Last Updated: 2025-04-23T17:56:10.835Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-89, CWE-74 Description: PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users unable to upgrade may delete the MySQL Smarty cache feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
upgrade may delete the MySQL Smarty cache feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hrgx-p36p-89q4 - https://github.com/PrestaShop/PrestaShop/commit/b6d96e7c2a4e35a44e96ffbcdfd34439b56af804 - https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.7
CVE ID: CVE-2022-31182 State: PUBLISHED Published: 2022-08-01T19:40:10.000Z Last Updated: 2025-04-23T17:56:04.316Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: discourse Products: discourse Problem Types: CWE-404 Description: Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: -
ourse. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-4ff8-3j78-w6pp - https://github.com/discourse/discourse/commit/7af25544c3940c4d046c51f4cfac9c72a06d4f50
CVE ID: CVE-2022-31183 State: PUBLISHED Published: 2022-08-01T19:50:11.000Z Last Updated: 2025-04-22T17:45:55.210Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: typelevel Products: fs2 Problem Types: CWE-295 Description: fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on Node.js, the parameter `requestCert = true` is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. `fs2-io` running on Node.js. The JVM TLS implementation is completely independent. 2. `TLSSocket`s in server-mode. Client-mode `TLSSocket`s are implemented via
S implementation is completely independent. 2. `TLSSocket`s in server-mode. Client-mode `TLSSocket`s are implemented via a different API. 3. mTLS as enabled via `requestCert = true` in `TLSParameters`. The default setting is `false` for server-mode `TLSSocket`s. It was introduced with the initial Node.js implementation of fs2-io in 3.1.0. A patch is released in v3.2.11. The requestCert = true parameter is respected and the peer certificate is verified. If verification fails, a SSLException is raised. If using an unpatched version on Node.js, do not use a server-mode TLSSocket with requestCert = true to establish a mTLS connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP
et with requestCert = true to establish a mTLS connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typelevel/fs2/security/advisories/GHSA-2cpx-6pqp-wf35 - https://github.com/nodejs/node/issues/43994 - https://github.com/typelevel/fs2/commit/659824395826a314e0a4331535dbf1ef8bef8207
CVE ID: CVE-2022-31184 State: PUBLISHED Published: 2022-08-01T19:40:30.000Z Last Updated: 2025-04-23T17:55:55.933Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: discourse Products: discourse Problem Types: CWE-770 Description: Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unable to upgrade should manually rate limit email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
manually rate limit email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-m5w9-8gp8-2hrf - https://github.com/discourse/discourse/commit/af1cb735db7fb73217b85d22dbadd1bc824ac0b0
CVE ID: CVE-2022-31185 State: PUBLISHED Published: 2022-08-01T19:25:11.000Z Last Updated: 2025-04-23T17:56:22.307Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: makedeb Products: mprweb Problem Types: CWE-200 Description: mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's email being leaked, which may be problematic if your email needs to remain private for any reason. Users hosting their own mprweb instance will need to upgrade to the latest commit to get thi
ain private for any reason. Users hosting their own mprweb instance will need to upgrade to the latest commit to get this fixed. Users on the official instance will already have this issue fixed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/makedeb/mprweb/security/advisories/GHSA-jm39-h693-678g - https://github.com/makedeb/mprweb/commit/d13e3f2f5a9c0b0f6782f35d837090732026ad77
CVE ID: CVE-2022-31186 State: PUBLISHED Published: 2022-08-01T19:25:24.000Z Last Updated: 2025-04-23T17:56:16.785Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nextauthjs Products: next-auth Problem Types: CWE-532 Description: NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in `next-auth` before `v4.10.2` and `v3.29.9` allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log (which is thrown during OAuth error handling) and use it to leverage further attacks on the system, like impersonating the client to ask fo
ring OAuth error handling) and use it to leverage further attacks on the system, like impersonating the client to ask for extensive permissions. This issue has been patched in `v4.10.2` and `v3.29.9` by moving the log for `provider` information to the debug level. In addition, we added a warning for having the `debug: true` option turned on in production. If for some reason you cannot upgrade, you can user the `logger` configuration option by sanitizing the logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://next-auth.js.org/getting-started/upgrade-v4 - https://github.com/nextauthjs/next-auth/security/advisories/GHSA-p6mm-27gq-9v3p - https:
rg/getting-started/upgrade-v4 - https://github.com/nextauthjs/next-auth/security/advisories/GHSA-p6mm-27gq-9v3p - https://next-auth.js.org/configuration/options#logger - https://next-auth.js.org/warnings#debug_enabled
CVE ID: CVE-2022-31187 State: PUBLISHED Published: 2022-09-14T18:00:15.000Z Last Updated: 2025-04-23T17:10:16.885Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users are advised to upgrade to version 10.0.3 to resolve this issue. Users unable to upgrade should disable global search. Additional Analyst Notes:
to version 10.0.3 to resolve this issue. Users unable to upgrade should disable global search. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-43j5-xhvj-9236 - https://github.com/glpi-project/glpi/commit/e248ed5649d267c0f61a17d99b7bd6be4074aadb
CVE ID: CVE-2022-31188 State: PUBLISHED Published: 2022-08-01T00:00:00.000Z Last Updated: 2025-04-22T17:48:10.288Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: cvat-ai Products: cvat Problem Types: CWE-918 Description: CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
karounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cvat-ai/cvat/security/advisories/GHSA-7vpj-j5xv-29pr - https://github.com/cvat-ai/cvat/commit/6fad1764efd922d99dbcda28c4ee72d071aa5a07 - http://packetstormsecurity.com/files/169814/CVAT-2.0-Server-Side-Request-Forgery.html
CVE ID: CVE-2022-31189 State: PUBLISHED Published: 2022-08-01T20:20:11.000Z Last Updated: 2025-04-23T17:55:41.782Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: DSpace Products: DSpace Problem Types: CWE-209 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an "Internal System Error" occurs in the JSPUI, then entire exception (including stack trace) is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This issue has been fixed in versi
in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This issue has been fixed in version 6.4. users are advised to upgrade. Users unable to upgrade should disable the display of error messages in their internal.jsp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-c2j7-66m3-r4ff - https://github.com/DSpace/DSpace/commit/afcc6c3389729b85d5c7b0230cbf9aaf7452f31a
CVE ID: CVE-2022-31190 State: PUBLISHED Published: 2022-08-01T20:10:11.000Z Last Updated: 2025-04-23T17:55:48.589Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: DSpace Products: DSpace Problem Types: CWE-200 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" object, as long as you know the handle/URL of the withdrawn Item. This vulnerability only impacts the XMLUI. Users are advised to upgrade to version 6.4 or newer. Additional Analyst Notes: - CVE Program Con
nly impacts the XMLUI. Users are advised to upgrade to version 6.4 or newer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-7w85-pp86-p4pq - https://github.com/DSpace/DSpace/pull/2451 - https://github.com/DSpace/DSpace/commit/574e25496a40173653ae7d0a49a19ed8e3458606.patch
CVE ID: CVE-2022-31191 State: PUBLISHED Published: 2022-08-01T20:30:17.000Z Last Updated: 2025-04-23T17:55:20.799Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DSpace Products: DSpace Problem Types: CWE-79 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI spellcheck "Did you mean" HTML escapes the data-spell attribute in the link, but not the actual displayed text. Similarly, the JSPUI autocomplete HTML does not properly escape text passed to it. Both are vulnerable to XSS. This vulnerability only impacts the JSPUI. Users are advised t
rly escape text passed to it. Both are vulnerable to XSS. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-c558-5gfm-p2r8 - https://github.com/DSpace/DSpace/commit/35030a23e48b5946f5853332c797e1c4adea7bb7 - https://github.com/DSpace/DSpace/commit/6f75bb084ab1937d094208c55cd84340040bcbb5 - https://github.com/DSpace/DSpace/commit/c89e493e517b424dea6175caba54e91d3847fc3a - https://github.com/DSpace/DSpace/commit/ebb83a75234d3de9be129464013e998dc929b68d
CVE ID: CVE-2022-31192 State: PUBLISHED Published: 2022-08-01T20:30:36.000Z Last Updated: 2025-04-23T17:55:14.797Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DSpace Products: DSpace Problem Types: CWE-79 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for t
S attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/commit/f7758457b7ec3489d525e39aa753cc70809d9ad9 - https://github.com/DSpace/DSpace/security/advisories/GHSA-4wm8-c2vv-xrpq - https://github.com/DSpace/DSpace/commit/28eb8158210d41168a62ed5f9e044f754513bc37
CVE ID: CVE-2022-31193 State: PUBLISHED Published: 2022-08-01T20:25:12.000Z Last Updated: 2025-04-23T17:55:36.024Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DSpace Products: DSpace Problem Types: CWE-601 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a legitimate DSpace/repository URL. When that URL is clicked by the target, it redirects them to a site of the attacker's choice. This issue has been pa
RL. When that URL is clicked by the target, it redirects them to a site of the attacker's choice. This issue has been patched in versions 5.11 and 6.4. Users are advised to upgrade. There are no known workaround for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpace/security/advisories/GHSA-763j-q7wv-vf3m - https://github.com/DSpace/DSpace/commit/5f72424a478f59061dcc516b866dcc687bc3f9de - https://github.com/DSpace/DSpace/commit/f7758457b7ec3489d525e39aa753cc70809d9ad9
CVE ID: CVE-2022-31194 State: PUBLISHED Published: 2022-08-01T20:25:26.000Z Last Updated: 2025-04-23T17:55:28.376Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H) Vendors: DSpace Products: DSpace Problem Types: CWE-22 Description: DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to multiple path traversal attacks, allowing an attacker to create files/directories anywhere on the server writable by the Tomcat/DSpace user, by modifying some request parameters during sub
s/directories anywhere on the server writable by the Tomcat/DSpace user, by modifying some request parameters during submission. This path traversal can only be executed by a user with special privileges (submitter rights). This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds. However, this vulnerability cannot be exploited by an anonymous user or a basic user. The user must first have submitter privileges to at least one Collection and be able to determine how to modify the request parameters to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DSpace/DSpa