Open redirect

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a...

CVE-2022-31193

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a...

CVE-2022-31193: URL Redirection to Untrusted Site

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a...

PT-2022-20602

Name of the Vulnerable Software and Affected Versions DSpace versions prior to 5.11 DSpace versions prior to 6.4 Description The JSPUI controlled vocabulary servlet in DSpace is vulnerable to an open redirect attack. An attacker can craft a malicious URL that looks like a legitimate...

DSpace input validation vulnerability

DSpace is an open source turnkey repository application from the DuraSpace community. An input validation error vulnerability exists in DSpace versions 4.0 through 6.3, which stems from the vulnerability of a JSPUI-controlled vocabulary servlet to an open redirection attack, where an attacker can...