CVE-2022-31189
1 advisory.
Maven/org.dspace:dspace-jspui CVE-2022-31189: medium 5.3
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Action: Upgrade org.dspace:dspace-jspui to 6.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 6.4 | - |
Fixed versions
| 6.4 |
Sources
- osv: GHSA-c2j7-66m3-r4ff
- https://github.com/DSpace/DSpace/security/advisories/GHSA-c2j7-66m3-r4ff
- https://nvd.nist.gov/vuln/detail/CVE-2022-31189
- https://github.com/DSpace/DSpace/commit/afcc6c3389729b85d5c7b0230cbf9aaf7452f31a
- https://github.com/DSpace/DSpace
CVE-2022-31189 · published · modified · JSON