Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/08 8:25 p.m.20 views

DSpace: ORE resource URI does not validate scheme for non-web resources

Overview When ingesting an aggregated ORE resource by URI using the OAI-ORE Harvester, the ORE Ingestion Crosswalk does not validate the URI scheme. This may allow for local file inclusion via malicious paths like file:///etc/passwd. This vulnerability impacts DSpace versions = 7.6.6, 8.0 = 8.3,...

4.4CVSS6AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder