GitHub Advisoryadvisory · Packagist

GHSA-fxc5-pr68-2px3 omeka/omeka-s Improper Input Validation vulnerability

MEDIUM Published 2023-08-04 Modified 2023-10-24 Official page ↗

Aliases: CVE-2023-4157
Ecosystem: Packagist
Packages: omeka/omeka-s
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N
Weaknesses: CWE-20, CWE-74
Reviewed: 2023-10-24

Affected packages

• Packagist omeka/omeka-s: < 4.0.3 → fixed in 4.0.3

Description

Improper Input Validation in GitHub repository omeka/omeka-s prior to 4.0.3.

Related

Alias · CVE (1)

CVE-2023-4157 CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository… vulnerability

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References