Omeka Omeka_s
5 CVEs affecting Omeka Omeka_s. Latest disclosed: 2023-08-28. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4159 | High | 8.8 | 2023-08-04 | Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. |
CVE-2023-4560 | Medium | 6.5 | 2023-08-28 | Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4. |
CVE-2023-4158 | Medium | 5.4 | 2023-08-04 | Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3. |
CVE-2023-4157 | Medium | 5.2 | 2023-08-04 | CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4… |
CVE-2023-4561 | Medium | 4.8 | 2023-08-28 | Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4. |