Scripta Escriptorium
5 CVEs affecting Scripta Escriptorium. Latest disclosed: 2026-08-06. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18258 | High | 8.8 | 2026-08-06 | Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote a… |
CVE-2026-18359 | High | 8.5 | 2026-08-06 | Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the ser… |
CVE-2026-18277 | High | 7.1 | 2026-08-06 | Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselv… |
CVE-2026-18275 | Medium | 6.5 | 2026-08-06 | Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segme… |
CVE-2026-18276 | Medium | 4.3 | 2026-08-06 | Missing authorization in the websocket consumer in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to subscribe to any document's event… |