CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-31191

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI spellcheck "Did you mean" HTML escapes the data-spell attribute in the link, but not the actual displayed text. Similarly, the JSPUI autocomplete HTML does not properly escape text passed to it. Both are vulnerable to XSS. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.8%

CVSS Severity

CVSS v3 Score 7.1

References

Products affected by CVE-2022-31191

Duraspace » Dspace » Version: 4.1

cpe:2.3:a:duraspace:dspace:4.1
Duraspace » Dspace » Version: 4.2

cpe:2.3:a:duraspace:dspace:4.2
Duraspace » Dspace » Version: 4.3

cpe:2.3:a:duraspace:dspace:4.3
Duraspace » Dspace » Version: 4.4

cpe:2.3:a:duraspace:dspace:4.4
Duraspace » Dspace » Version: 4.5

cpe:2.3:a:duraspace:dspace:4.5
Duraspace » Dspace » Version: 4.6

cpe:2.3:a:duraspace:dspace:4.6
Duraspace » Dspace » Version: 4.7

cpe:2.3:a:duraspace:dspace:4.7
Duraspace » Dspace » Version: 4.8

cpe:2.3:a:duraspace:dspace:4.8
Duraspace » Dspace » Version: 4.9

cpe:2.3:a:duraspace:dspace:4.9
Duraspace » Dspace » Version: 5.0

cpe:2.3:a:duraspace:dspace:5.0
Duraspace » Dspace » Version: 5.1

cpe:2.3:a:duraspace:dspace:5.1
Duraspace » Dspace » Version: 5.10

cpe:2.3:a:duraspace:dspace:5.10
Duraspace » Dspace » Version: 5.2

cpe:2.3:a:duraspace:dspace:5.2
Duraspace » Dspace » Version: 5.3

cpe:2.3:a:duraspace:dspace:5.3
Duraspace » Dspace » Version: 5.4

cpe:2.3:a:duraspace:dspace:5.4
Duraspace » Dspace » Version: 5.5

cpe:2.3:a:duraspace:dspace:5.5
Duraspace » Dspace » Version: 5.6

cpe:2.3:a:duraspace:dspace:5.6
Duraspace » Dspace » Version: 5.7

cpe:2.3:a:duraspace:dspace:5.7
Duraspace » Dspace » Version: 5.8

cpe:2.3:a:duraspace:dspace:5.8
Duraspace » Dspace » Version: 5.9

cpe:2.3:a:duraspace:dspace:5.9
Duraspace » Dspace » Version: 6.1

cpe:2.3:a:duraspace:dspace:6.1
Duraspace » Dspace » Version: 6.2

cpe:2.3:a:duraspace:dspace:6.2
Duraspace » Dspace » Version: 6.3

cpe:2.3:a:duraspace:dspace:6.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-31191

Products

Pricing

Contact Us