Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:47752
HistoryJun 26, 2024 - 6:57 a.m.

Cross-site Scripting (XSS)

2024-06-2606:57:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
dspace
server
webapp
vulnerability
cross-site scripting
xss
validation
download behavior
html
xml
javascript
bitstreams
browser
attacks

2.6 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L

5.9 Medium

AI Score

Confidence

High

JSON

org.dspace:dspace-server-webapp is vulnerable to Cross-site Scripting (XSS). The vulnerability is caused by improper validation of download behavior for HTML, XML, or JavaScript Bitstreams, allowing embedded JavaScript to execute in the user’s browser, which could potentially lead to XSS attacks.

Related

github 1
cvelist 1
nvd 1
osv 2
cve 1
github
github
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
2024-06-25 17:07:32
cvelist
cvelist
CVE-2024-38364 DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
2024-06-25 23:45:57
nvd
nvd
CVE-2024-38364
2024-06-26 00:15:10
osv
osv
DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
2024-06-25 17:07:32
CVE-2024-38364
2024-06-26 00:15:10
cve
cve
CVE-2024-38364
2024-06-26 00:15:10

2.6 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L

5.9 Medium

AI Score

Confidence

High

JSON
Related for VERACODE:47752
github1cvelist1nvd1osv2cve1