CVE-2022-31194
1 advisory.
Maven/org.dspace:dspace-jspui CVE-2022-31194: high 8.2, EPSS 1.46%
JSPUI vulnerable to path traversal in submission (resumable) upload
Action: Upgrade org.dspace:dspace-jspui to 5.11 (5.x) or 6.4 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.11 | - |
| 6.0 | 6.4 | - |
Fixed versions
| 5.11 | 6.4 |
Sources
- osv: GHSA-qp5m-c3m9-8q2p
- https://github.com/DSpace/DSpace/security/advisories/GHSA-qp5m-c3m9-8q2p
- https://nvd.nist.gov/vuln/detail/CVE-2022-31194
- https://github.com/DSpace/DSpace/commit/7569c6374aefeafb996e202cf8d631020eda5f24
- https://github.com/DSpace/DSpace/commit/d1dd7d23329ef055069759df15cfa200c8e3
- https://github.com/DSpace/DSpace
CVE-2022-31194 · published · modified · JSON