Skip to main content

Duraspace

9 CVEs vendor

Monthly

CVE-2022-31195 Aug 01, 21:15 Maven HIGH PATCH This Week

DSpace open source software is a repository application which provides durable access to digital resources. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Tomcat Dspace Duraspace
NVD GitHub
CVSS 3.1
7.2
EPSS
1.1%
CVE-2022-31194 Aug 01, 21:15 Maven HIGH PATCH This Week

DSpace open source software is a repository application which provides durable access to digital resources. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Tomcat Dspace Duraspace
NVD GitHub
CVSS 3.1
7.2
EPSS
0.9%
CVE-2022-31193 Aug 01, 21:15 Maven MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Dspace Duraspace
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2022-31192 Aug 01, 21:15 Maven MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Dspace Duraspace
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2022-31191 Aug 01, 21:15 Maven MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Dspace Duraspace
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2022-31189 Aug 01, 21:15 Maven MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Dspace Duraspace
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-31190 Aug 01, 20:15 Maven MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Dspace Duraspace
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2021-41189 Oct 29, 18:15 Maven HIGH POC PATCH This Week

DSpace is an open source turnkey repository application. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Dspace Duraspace
NVD GitHub
CVSS 3.1
7.2
EPSS
2.0%
CVE-2019-6986 Jan 28, 15:29 Maven HIGH POC PATCH This Week

SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service (ReDoS), as demonstrated by. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Command Injection Vitro Duraspace
NVD GitHub
CVSS 3.0
7.5
EPSS
3.0%
EPSS 1% CVSS 7.2
HIGH PATCH This Week

DSpace open source software is a repository application which provides durable access to digital resources. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Tomcat Dspace +1
NVD GitHub
EPSS 1% CVSS 7.2
HIGH PATCH This Week

DSpace open source software is a repository application which provides durable access to digital resources. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Tomcat Dspace +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Dspace Duraspace
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Dspace Duraspace
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Dspace Duraspace
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Dspace Duraspace
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

DSpace open source software is a repository application which provides durable access to digital resources. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Dspace Duraspace
NVD GitHub
EPSS 2% CVSS 7.2
HIGH POC PATCH This Week

DSpace is an open source turnkey repository application. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Dspace Duraspace
NVD GitHub
EPSS 3% CVSS 7.5
HIGH POC PATCH This Week

SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service (ReDoS), as demonstrated by. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Command Injection Vitro +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy