PT-2026-56677

Name of the Vulnerable Software and Affected Versions DSpace versions 8.0-rc1 through 8.3 DSpace versions 9.0-rc1 through 9.2 DSpace version 10-rc1 Description Remote Code Execution RCE is possible via Velocity Templates used for COAR Notify/LDN messages. An attacker with DSpace administrator...