Lyrasis Dspace vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Lyrasis Dspace: 1 record(s), with affected versions and fixes.
cpe:2.3:a:lyrasis:dspace

CVE-2025-61190 Medium · 6.1 CWE-79 Mar 27, 2026

Cross-site Scripting (XSS) in Lyrasis Dspace

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.