CVE-2022-31193
1 advisory.
Maven/org.dspace:dspace-jspui CVE-2022-31193: high 7.1
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
Action: Upgrade org.dspace:dspace-jspui to 5.11 (5.x) or 6.4 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.11 | - |
| 6.0 | 6.4 | - |
Fixed versions
| 5.11 | 6.4 |
Sources
- osv: GHSA-763j-q7wv-vf3m
- https://github.com/DSpace/DSpace/security/advisories/GHSA-763j-q7wv-vf3m
- https://nvd.nist.gov/vuln/detail/CVE-2022-31193
- https://github.com/DSpace/DSpace/commit/5f72424a478f59061dcc516b866dcc687bc3f9de
- https://github.com/DSpace/DSpace/commit/f7758457b7ec3489d525e39aa753cc70809d9ad9
- https://github.com/DSpace/DSpace
CVE-2022-31193 · published · modified · JSON