CVE-2021-41189
1 advisory.
Maven/org.dspace:dspace-api CVE-2021-41189: high 7.2, EPSS 2.06%
Communities and collections administrators can escalate their privilege up to system administrator
Action: Upgrade org.dspace:dspace-api to 7.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0 | 7.1 | - |
Fixed versions
| 7.1 |
Sources
- osv: GHSA-cf2j-vf36-c6w8
- https://github.com/DSpace/DSpace/security/advisories/GHSA-cf2j-vf36-c6w8
- https://nvd.nist.gov/vuln/detail/CVE-2021-41189
- https://github.com/DSpace/DSpace/issues/7928
- https://github.com/DSpace/DSpace/commit/277b499a5cd3a4f5eb2370513a1b7e4ec2a6e041
- https://github.com/DSpace/DSpace/commit/c3bea16ab911606e15ae96c97a1575e1ffb14f8a
- https://github.com/DSpace/DSpace
CVE-2021-41189 · published · modified · JSON