Privilege Escalation

2021-11-0105:00:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.6%

JSON

dspace-api is vulnerable to privilege escalation. The vulnerability exists because it does not properly handle permissions, which allows any user to escalate their permissions to become a system administrator.

CPENameOperatorVersion
dspace kernel :: api and implementationeq7.0
dspace kernel :: api and implementationle7.0-beta5
dspace kernel :: api and implementationeq7.0
dspace kernel :: api and implementationle7.0-beta5

Name	Operator	Version
dspace kernel :: api and implementation	eq	7.0
dspace kernel :: api and implementation	le	7.0-beta5
dspace kernel :: api and implementation	eq	7.0
dspace kernel :: api and implementation	le	7.0-beta5