Vulnerabilidades en intranda
16 resultadosCVE-2020-15124CRITICALPath traversal in Goobi viewer CoreEPSS 1.5%CVE-2026-46652CRITICALPath traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewerEPSS 0.7%CVE-2023-29014MEDIUMGoobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID ParameterEPSS 0.4%CVE-2023-29015MEDIUMGoobi viewer Core has Cross-Site Scripting Vulnerability in User Comments EPSS 0.4%CVE-2023-29016MEDIUMGoobi viewer Core has Cross-Site Scripting Vulnerability in User NicknamesEPSS 0.4%CVE-2026-45083CRITICALGoobi viewer: Unauthenticated Solr Streaming Expression ProxyEPSS 0.4%CVE-2026-46651CRITICALUnauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewerEPSS 0.4%CVE-2026-46346MEDIUMGoobi viewer: Predictable Password Reset Token Allows Unauthorized Password ResetEPSS 0.3%CVE-2026-55457HIGHGoobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypassEPSS 0.3%CVE-2026-55465MEDIUMGoobi viewer: Solr injection via unvalidated region parameter in spatial searchEPSS 0.3%CVE-2026-55442MEDIUMGoobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injectionEPSS 0.3%CVE-2026-55486CRITICALGoobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSSEPSS 0.3%CVE-2026-55444MEDIUMGoobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parametersEPSS 0.3%CVE-2026-46347MEDIUMGoobi viewer: Predictable Replacement Password Allows Account Takeover After Password ResetEPSS 0.3%CVE-2026-55459HIGHGoobi viewer: OpenID JWT audience not enforced by the verifierEPSS 0.2%CVE-2026-55463MEDIUMGoobi viewer: WebSocket endpoints lack server-side authentication and origin validationEPSS 0.1%