107 matches found
CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in omeka/omeka-s
Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3...
CVE-2023-4159
CVE-2023-4159 affects Omeka-S before 4.0.3. The issue is an unrestricted file upload vulnerability where a malicious file can bypass whitelist checks by using Magic Bytes (GIF87a) to upload dangerous code (e.g., shell_php.hphp), enabling remote code execution when commands are run via the uploade...
CVE-2023-4158 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...
CVE-2023-4158 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.3...
CVE-2023-4158
Omeka S prior to 4.0.3 is affected by a stored XSS vulnerability in the omeka/omeka-s codebase. The evidence across multiple sources confirms Cross-site Scripting (XSS) and that the issue exists before version 4.0.3; no explicit root-cause or remediation details are provided in the supplied docum...
CVE-2023-4157
CVE-2023-4157 affects omeka/omeka-s up to version 4.0.3 due to CWE-74 improper neutralization of special elements in output used by a downstream component, enabling injection in output. Affected: omeka/omeka-s prior to 4.0.3. Root cause: inadequate input validation leading to injection. Impact is...
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
Omeka S Code Issue Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
PT-2023-27986 · Omeka · Omeka-S
Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.3 Description: The issue concerns an unrestricted upload of a file with a dangerous type. Recommendations: For versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue...
Omeka S Cross-Site Scripting Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
PT-2023-27982 · Omeka-S · Omeka-S
Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.3 Description: The issue concerns improper input validation in the omeka/omeka-s GitHub repository. This can lead to injection attacks, where special elements are not properly neutralized in output used by...
Omeka S Injection Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
CVE-2023-3982
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3980
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...