CVE-2022-31195
1 advisory.
Maven/org.dspace:dspace-api CVE-2022-31195: high 7.2
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
Action: Upgrade org.dspace:dspace-api to 5.11 (5.x) or 6.4 (6.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.11 | - |
| 6.0 | 6.4 | - |
Fixed versions
| 5.11 | 6.4 |
Sources
- osv: GHSA-8rmh-55h4-93h5
- https://github.com/DSpace/DSpace/security/advisories/GHSA-8rmh-55h4-93h5
- https://nvd.nist.gov/vuln/detail/CVE-2022-31195
- https://github.com/DSpace/DSpace/commit/56e76049185bbd87c994128a9d77735ad7af0199
- https://github.com/DSpace/DSpace/commit/7af52a0883a9dbc475cf3001f04ed11b24c8a4c0
- https://github.com/DSpace/DSpace
CVE-2022-31195 · published · modified · JSON