Lucene search

Omeka S Security Vulnerabilities

cve

CVE-2023-4157

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.

5.2CVSS

5.1AI Score

0.001EPSS

2023-08-04 06:15 PM

cve

CVE-2023-4158

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.

5.4CVSS

5.4AI Score

0.001EPSS

2023-08-04 06:15 PM

cve

CVE-2023-4159

Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.

8.8CVSS

8.7AI Score

0.001EPSS

2023-08-04 06:15 PM

cve

CVE-2023-4560

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.

6.5CVSS

6.4AI Score

0.0005EPSS

2023-08-28 01:15 AM

cve

CVE-2023-4561

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.

4.8CVSS

5.1AI Score

0.0004EPSS

2023-08-28 01:15 AM