Duraspace: >> Vitro Security Vulnerabilities
SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service (ReDoS), as demonstrated by crafted use of FILTER%20regex in a /individual?uri= request.
CVSS Score
7.5
EPSS Score
0.011
Published
2019-01-28