CVE-2021-43781

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly check permissions when a record is published. The vulnerability is exploitable in a default...

PT-2021-23929

Name of the Vulnerable Software and Affected Versions: Invenio-Drafts-Resources versions prior to 0.13.7 and 0.14.6 Description: Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. The issue arises from improper permission checks...

CVE-2021-43781: Missing Authorization

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Invenio-Drafts-Resources prior to versions 0.13.7 and 0.14.6 does not properly check permissions when a record is published. The vulnerability is exploitable in a default...