PT-2019-18400 · Vivo · Vivo Vitro

Name of the Vulnerable Software and Affected Versions: VIVO Vitro version 1.10.0 Description: The issue allows a remote attacker to execute arbitrary SPARQL via the uri parameter, potentially leading to a regular expression denial of service ReDoS. This can be achieved by crafting a specific...