Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/13 1:22 a.m.20 views

GHSA-HGQ9-Q8G2-3JMG Command Injection in VIVO Vitro

SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service ReDoS, as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request...

7.5CVSS7.8AI score0.03016EPSS
SaveExploits1References7
Rows per page
Query Builder