Packagist/islandora/islandora: critical 10
Islandora 2.0 before 2.4.1 could allow any user to upload content into a repository
Action: Upgrade islandora/islandora to 2.4.1 or later.
composer require islandora/islandora:2.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0 | 2.4.1 | - |
Fixed versions
| 2.4.1 |
Sources
- osv: GHSA-m58q-qq5h-mgqq
- https://github.com/Islandora/islandora/security/advisories/GHSA-m58q-qq5h-mgqq
- https://github.com/Islandora/islandora/commit/573d6878edf057987f1e41e5068de0074573e4c7
- https://github.com/Islandora-CLAW/islandora
- https://github.com/Islandora/islandora/releases/tag/2.4.1
published · modified · JSON