High severity7.2NVD Advisory· Published Oct 29, 2021· Updated Jun 17, 2026
CVE-2021-41189
CVE-2021-41189
Description
DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below. This issue is patched in version 7.1. As a workaround, users of 7.0 may temporarily disable the ability for community or collection administrators to manage permissions or workflows settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.dspace:dspace-apiMaven | >= 7.0, < 7.1 | 7.1 |
Affected products
3Patches
Vulnerability mechanics
References
6- github.com/DSpace/DSpace/commit/277b499a5cd3a4f5eb2370513a1b7e4ec2a6e041nvdPatchThird Party AdvisoryWEB
- github.com/DSpace/DSpace/commit/c3bea16ab911606e15ae96c97a1575e1ffb14f8anvdPatchThird Party AdvisoryWEB
- github.com/DSpace/DSpace/issues/7928nvdExploitThird Party AdvisoryWEB
- github.com/DSpace/DSpace/security/advisories/GHSA-cf2j-vf36-c6w8nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-cf2j-vf36-c6w8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-41189ghsaADVISORY
News mentions
0No linked articles in our index yet.