DSpace__DSpace_CVE-2022-31195_5-10

DSpace-Versionsinformationen können online eingesehen werden unter https://wiki.duraspace.org/display/DSDOC/ Dokumentation für die aktuellsten stabilen Versionen kann heruntergeladen oder online eingesehen werden unter http://www.dspace.org/latest-release/ https://wiki.duraspace.org/display/DSDOC...

CVE-2022-31195

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...

CVE-2022-31195 Path traversal vulnerability in Simple Archive Format package import in DSpace

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...

CVE-2022-31195

CVE-2022-31195 affects DSpace open source software, specifically the ItemImportServiceImpl, which is vulnerable to a path traversal when processing SAF packages. A malicious SAF package could cause a file/directory to be created anywhere writable by the Tomcat/DSpace user, but only if the attacke...