PT-2022-20601 · Dspace · Dspace

Andrea Bollini · Published 2022-08-01 · Updated 2022-08-08 · CVE-2022-31192

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions DSpace versions prior to 5.11 DSpace versions prior to 6.4

Description The JSPUI "Request a Copy" feature does not properly escape values submitted and stored from the "Request a Copy" form, making item requests vulnerable to XSS attacks. This issue only impacts the JSPUI, and users are advised to upgrade. There are no known workarounds for this vulnerability.

Recommendations For DSpace 5.x, upgrade to version 5.11 or apply the patch file from https://github.com/DSpace/DSpace/commit/28eb8158210d41168a62ed5f9e044f754513bc37.patch. For DSpace 6.x, upgrade to version 6.4 or apply the patch file from https://github.com/DSpace/DSpace/commit/503a6af57fd720c37b0d86c34de63baa5dd85819.patch. As a temporary workaround, consider disabling the "Request a Copy" feature by commenting out the request.item.type = all configuration or setting its value to empty.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-31192

GHSA-4WM8-C2VV-XRPQ

Affected Products

Dspace

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31192.json · Exploit
• https://github.com/DSpace/DSpace/commit/28eb8158210d41168a62ed5f9e044f754513bc37 · Patch
• https://github.com/DSpace/DSpace/commit/f7758457b7ec3489d525e39aa753cc70809d9ad9 · Patch
• https://github.com/DSpace/DSpace/security/advisories/GHSA-4wm8-c2vv-xrpq · Patch
• https://osv.dev/vulnerability/GHSA-4wm8-c2vv-xrpq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31192 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31192 · Vendor Advisory
• https://github.com/DSpace/DSpace · Note
• https://t.me/cibsecurity/47378 · Telegram Post