DSpace__DSpace_CVE-2022-31194_5-10

DSpaceのバージョン情報は、以下のオンラインで確認できます。 https://wiki.duraspace.org/display/DSDOC/ 最新の安定版リリースのドキュメントは、以下のオンラインでダウンロードまたは閲覧できます。 http://www.dspace.org/latest-release/ https://wiki.duraspace.org/display/DSDOC/ http://sourceforge.net/projects/dspace/files/DSpace%20Stable/ （バージョンを選択し、DSpace-Manual.pdf...

CVE-2022-31194

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to multiple path traversal attacks, allowi...

CVE-2022-31194

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to multiple path traversal attacks, allowi...

CVE-2022-31194

The CVE-2022-31194 issue affects DSpace JSPUI in the resumable upload path, where SubmissionController and FileUploadRequest allow path traversal to write files/directories on the server, limited to users with submitter privileges (not anonymous/basic users). Root cause: manipulating submission r...