Vulnerabilidades do Lyrasis Dspace

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Lyrasis Dspace: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:lyrasis:dspace

CVE-2025-61190 Média · 6.1 CWE-79 27/03/2026

Cross-site Scripting (XSS) em Lyrasis Dspace

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.