1 matches found
DSpace: ORE resource URI does not validate scheme for non-web resources
Overview When ingesting an aggregated ORE resource by URI using the OAI-ORE Harvester, the ORE Ingestion Crosswalk does not validate the URI scheme. This may allow for local file inclusion via malicious paths like file:///etc/passwd. This vulnerability impacts DSpace versions = 7.6.6, 8.0 = 8.3,...
4.4CVSS6AI score
SaveExploits0References5Affected Software1
20