CVE-2024-38364
1 advisory.
Maven/org.dspace:dspace-server-webapp CVE-2024-38364: low 2.6, EPSS 0.39%
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
Action: Upgrade org.dspace:dspace-server-webapp to 7.6.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0 | 7.6.2 | - |
Fixed versions
| 7.6.2 |
Sources
- osv: GHSA-94cc-xjxr-pwvf
- https://github.com/DSpace/DSpace/security/advisories/GHSA-94cc-xjxr-pwvf
- https://nvd.nist.gov/vuln/detail/CVE-2024-38364
- https://github.com/DSpace/DSpace/pull/8891
- https://github.com/DSpace/DSpace/pull/9638
- https://github.com/DSpace/DSpace/commit/f1059b4340857cca3dc4c45b1ebbadce6bb61c0b
- https://github.com/DSpace/DSpace
CVE-2024-38364 · published · modified · JSON