JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11

Impact The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a legitimate DSpace/repository URL. When that URL is clicked by the target, it redirects them to a site of the attacker's choice. This vulnerability...

de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (5.8.0), org.dspace.modules:jspui (>=5.0, <=5.10) potentially affected by CVE-2022-31192 via org.dspace:dspace-jspui (>=5.0, <=5.10)

org.dspace:dspace-jspui MAVEN version =5.0, =5.0, =5.10 Source cves: CVE-2022-31192 Source advisory: OSV:GHSA-4WM8-C2VV-XRPQ...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (6.3.0) +1 more potentially affected by CVE-2022-31192 via org.dspace:dspace-jspui (>=6.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =6.0, =6.2.0, =6.0, =6.3 Source cves: CVE-2022-31192 Source advisory: OSV:GHSA-4WM8-C2VV-XRPQ...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (6.3.0) +1 more potentially affected by CVE-2022-31192 via org.dspace:dspace-jspui (>=6.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =6.0, =6.2.0, =6.0, =6.3 Source cves: CVE-2022-31192 Source advisory: GHSA-4WM8-C2VV-XRPQ...

de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (5.8.0), org.dspace.modules:jspui (>=5.0, <=5.10) potentially affected by CVE-2022-31192 via org.dspace:dspace-jspui (>=5.0, <=5.10)

org.dspace:dspace-jspui MAVEN version =5.0, =5.0, =5.10 Source cves: CVE-2022-31192 Source advisory: GHSA-4WM8-C2VV-XRPQ...

JSPUI Possible Cross Site Scripting in "Request a Copy" Feature

Impact The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. This vulnerability does NOT impact the XMLUI or 7.x. Patches...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (6.3.0) +1 more potentially affected by CVE-2022-31191 via org.dspace:dspace-jspui (>=6.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =6.0, =6.2.0, =6.0, =6.3 Source cves: CVE-2022-31191 Source advisory: OSV:GHSA-C558-5GFM-P2R8...

de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (5.8.0), org.dspace.modules:jspui (>=4.0, <=5.10) potentially affected by CVE-2022-31191 via org.dspace:dspace-jspui (>=4.0, <=5.10)

org.dspace:dspace-jspui MAVEN version =4.0, =4.0, =5.10 Source cves: CVE-2022-31191 Source advisory: OSV:GHSA-C558-5GFM-P2R8...

de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (5.8.0), org.dspace.modules:jspui (>=4.0, <=5.10) potentially affected by CVE-2022-31191 via org.dspace:dspace-jspui (>=4.0, <=5.10)

org.dspace:dspace-jspui MAVEN version =4.0, =4.0, =5.10 Source cves: CVE-2022-31191 Source advisory: GHSA-C558-5GFM-P2R8...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (6.3.0) +1 more potentially affected by CVE-2022-31191 via org.dspace:dspace-jspui (>=6.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =6.0, =6.2.0, =6.0, =6.3 Source cves: CVE-2022-31191 Source advisory: GHSA-C558-5GFM-P2R8...

JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting

Impact The JSPUI spellcheck "Did you mean" HTML escapes the data-spell attribute in the link, but not the actual displayed text. Similarly, the JSPUI autocomplete HTML does not properly escape text passed to it. Both are vulnerable to XSS. This vulnerability only impacts the JSPUI. This...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (>=5.8.0, <=6.3.0) +1 more potentially affected by CVE-2022-31189 via org.dspace:dspace-jspui (>=4.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =4.0, =6.2.0, =5.8.0, =4.0, =6.3 Source cves: CVE-2022-31189 Source advisory: OSV:GHSA-C2J7-66M3-R4FF...

de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1), de.the-library-code.dspace:addon-identifiers-enduring-submission-jspui (>=5.8.0, <=6.3.0) +1 more potentially affected by CVE-2022-31189 via org.dspace:dspace-jspui (>=4.0, <=6.3)

org.dspace:dspace-jspui MAVEN version =4.0, =6.2.0, =5.8.0, =4.0, =6.3 Source cves: CVE-2022-31189 Source advisory: GHSA-C2J7-66M3-R4FF...

JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization

Impact When an "Internal System Error" occurs in the JSPUI, then entire exception including stack trace is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This vulnerability does NOT impact...

GHSA-C2J7-66M3-R4FF JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization

Impact When an "Internal System Error" occurs in the JSPUI, then entire exception including stack trace is available. Information in this stacktrace may be useful to an attacker in launching a more sophisticated attack. This vulnerability only impacts the JSPUI. This vulnerability does NOT impact...

Path Traversal

org.dspace:dspace-jspui is vulnerable to path traversal. The vulnerability exists due to the resumable upload implementations in SubmissionController and FileUploadRequest components, which allows an attacker to modify request parameters during submission and create files or directories anywhere ...

Information Disclosure

dspace-jspui is vulnerable to information disclosure. The vulnerability exists because the doGet function of InternalErrorServlet.java does not properly sanitize the internal system error exceptions and stack traces, allowing an attacker to gain sensitive information through the exceptions and...

Cross-site Scripting (XSS)

org.dspace:dspace-jspui is vulnerable to cross-site scriptingXSS attacks. The Request a Copy feature does not properly escape values submitted and stored from the Request a Copy form, which allows an attacker to inject and execute malicious javascript through the parameters in processForm functio...

Open Redirect

dspace-jspui is vulnerable to open redirect attacks. The vulnerability exists through the controlled vocabulary feature in the doDSGet function of ControlledVocabularyServlet.java, allowing an attacker to redirect to malicious websites by providing maliciously crafted urls...

CVE-2022-31189

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an "Internal System Error" occurs in the JSPUI, then entire exception including stack trace is available. Information in this stacktrace may ...