High severity7.1NVD Advisory· Published Aug 1, 2022· Updated Jun 17, 2026
CVE-2022-31192
CVE-2022-31192
Description
DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.dspace:dspace-jspuiMaven | >= 5.0, < 5.11 | 5.11 |
org.dspace:dspace-jspuiMaven | >= 6.0, < 6.4 | 6.4 |
Affected products
3Patches
Vulnerability mechanics
References
5- github.com/DSpace/DSpace/commit/28eb8158210d41168a62ed5f9e044f754513bc37nvdPatchThird Party AdvisoryWEB
- github.com/DSpace/DSpace/commit/f7758457b7ec3489d525e39aa753cc70809d9ad9nvdPatchThird Party AdvisoryWEB
- github.com/DSpace/DSpace/security/advisories/GHSA-4wm8-c2vv-xrpqnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-4wm8-c2vv-xrpqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-31192ghsaADVISORY
News mentions
0No linked articles in our index yet.