CVE-2022-31191
1 advisory.
Maven/org.dspace:dspace-jspui CVE-2022-31191: high 7.1
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Action: Upgrade org.dspace:dspace-jspui to 5.11 (5.x) or 6.4 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.11 | - |
| 6.0 | 6.4 | - |
Fixed versions
| 5.11 | 6.4 |
Sources
- osv: GHSA-c558-5gfm-p2r8
- https://github.com/DSpace/DSpace/security/advisories/GHSA-c558-5gfm-p2r8
- https://nvd.nist.gov/vuln/detail/CVE-2022-31191
- https://github.com/DSpace/DSpace/commit/35030a23e48b5946f5853332c797e1c4adea7bb7
- https://github.com/DSpace/DSpace/commit/6f75bb084ab1937d094208c55cd84340040bcbb5
- https://github.com/DSpace/DSpace/commit/c89e493e517b424dea6175caba54e91d3847fc3a
- https://github.com/DSpace/DSpace/commit/ebb83a75234d3de9be129464013e998dc929b68d
- https://github.com/DSpace/DSpace
CVE-2022-31191 · published · modified · JSON