1 matches found
GHSA-HGQ9-Q8G2-3JMG Command Injection in VIVO Vitro
SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service ReDoS, as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request...
7.5CVSS7.8AI score0.03016EPSS
SaveExploits1References7
20