CVE-2021-41189

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below. This issue is patched in version 7.1. As a workaround, users of 7.0 may temporarily disable the ability for community or collection administrators to manage permissions or workflows settings.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Oct 29, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-41199.8bookstack is vulnerable to Improper Access Control CVE-2021-411905.0The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution CVE-2021-411917.5Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have s CVE-2021-411926.5Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying t CVE-2021-411939.8wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions p CVE-2021-411949.8FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When Jupyter CVE-2021-411955.5TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_*` operations result CVE-2021-411965.5TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size CVE-2021-411975.5TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensio CVE-2021-411985.5TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large input argument then the CVE-2021-411995.5TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a large input argument CVE-2021-41207.8snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject