CVE-2022-31192

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form. This means that item requests could be vulnerable to XSS attacks. This vulnerability only impacts the JSPUI. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Aug 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-311936.1DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311947.2DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component f CVE-2022-311957.2DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImp CVE-2022-311967.5Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is tr CVE-2022-311978.0PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java CVE-2022-311987.5OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Governor that use the module `Go CVE-2022-311999.8Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Audito CVE-2022-31209.8A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an u CVE-2022-312006.1Atmail 5.62 allows XSS via the mail/parse.php?file=html/$this-%3ELanguage/help/filexp.html&FirstLoad=1&HelpFile=file.html Search Terms field CVE-2022-312015.4SoftGuard Web (SGW) before 5.1.5 allows HTML injection.CVE-2022-312026.5The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via export or man.tcl.CVE-2022-312047.5Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows