Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/08/06 5:48 a.m.48 views

DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

7.2CVSS6.7AI score0.01344EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/08/06 5:48 a.m.80 views

GHSA-8RMH-55H4-93H5 DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

7.2CVSS6.9AI score0.01344EPSS
SaveExploits0References5
Rows per page
Query Builder