Duraspace

10 CVEs across 2 Duraspace products. Browse Duraspace vulnerabilities, severities, and proof-of-concept exploits.

Duraspace products with known CVEs

ProductCVEs
Dspace9
Vitro1
Duraspace CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-31195High7.22022-08-01DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is v…
CVE-2022-31194High8.22022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPU…
CVE-2022-31193High7.12022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPU…
CVE-2022-31192High7.12022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPU…
CVE-2022-31191High7.12022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPU…
CVE-2022-31189Medium5.32022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an…
CVE-2022-31190Medium5.32022-08-01DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affec…
CVE-2021-41189High7.22021-10-29DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become s…
CVE-2019-6986High7.52019-01-28SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of se…
CVE-2016-10726High7.52018-07-10The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitr…