Europeana Repox
6 CVEs affecting Europeana Repox. Latest disclosed: 2023-12-13. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6723 | Critical | 10.0 | 2023-12-13 | An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload f… |
CVE-2023-6718 | Critical | 9.4 | 2023-12-13 | An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any aut… |
CVE-2023-6721 | High | 8.3 | 2023-12-13 | An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function… |
CVE-2023-6722 | High | 7.5 | 2023-12-13 | A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of… |
CVE-2023-6719 | Medium | 6.3 | 2023-12-13 | An XSS vulnerability has been detected in Repox, which allows an attacker to compromise interactions between a user and the vulnerable application, and can be… |
CVE-2023-6720 | Medium | 5.5 | 2023-12-13 | An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to t… |