Vulnerabilities in DSpace
15 resultsVexday analysis
DSpace apresenta 11 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida e nenhuma crítica conforme CVSS, reduzindo a urgência imediata. A fraqueza dominante é travessia de diretórios (CWE-22), indicando risco de exposição de arquivos sensíveis, embora sem atividade recente de descoberta (nenhuma publicação nos últimos 90 dias). O risco permanece de baixa a média intensidade e não requer ação emergencial.
CVE-2021-41189HIGHCommunities and collections administrators can escalate their privilege up to system administratorEPSS 2.1%CVE-2022-31195HIGHPath traversal vulnerability in Simple Archive Format package import in DSpaceEPSS 1.4%CVE-2022-31194HIGHPath traversal vulnerabilities in DSpace JSPUI submission uploadEPSS 1.1%CVE-2022-31190MEDIUMMetadata of withdrawn Items is exposed to anonymous users in DSpace XMLUIEPSS 0.9%CVE-2026-49832HIGHDSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDNEPSS 0.9%CVE-2022-31191HIGHCross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete toolsEPSS 0.8%CVE-2022-31192HIGHCross Site Scripting possible in DSpace JSPUI "Request a Copy" featureEPSS 0.8%CVE-2022-31193HIGHURL Redirection to Untrusted Site in Dspace JSPUIEPSS 0.7%CVE-2022-31189MEDIUM"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitizationEPSS 0.7%CVE-2026-49831MEDIUMDSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)EPSS 0.5%CVE-2026-49830MEDIUMDSpace: ORE resource URI does not validate scheme for non-web resourcesEPSS 0.5%CVE-2025-53622MEDIUMDSpace has path traversal vulnerability in Simple Archive Format (SAF) package import via contents fileEPSS 0.4%CVE-2024-38364LOWDSpace Cross Site Scripting (XSS) via a deposited HTML/XML documentEPSS 0.4%CVE-2025-53621MEDIUMDSpace vulnerable to XML External Entity (XXE) injection in import via Simple Archive Format (SAF) or import from external sourcesEPSS 0.4%CVE-2026-49833MEDIUMDSpace: Path Traversal possible in LDN message generationEPSS 0.4%