Known Vulnerabilities for Omeka S by Omeka
Listed below are 5 of the newest known vulnerabilities associated with "Omeka S" by "Omeka".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-4561 json | Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4. | 4.8 - MEDIUM | 2023-08-28 | 2023-08-29 |
| CVE-2023-4560 json | Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4. | 6.5 - MEDIUM | 2023-08-28 | 2023-08-29 |
| CVE-2023-4159 json | Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. | 8.8 - HIGH | 2023-08-04 | 2023-08-09 |
| CVE-2023-4158 json | Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3. | 5.4 - MEDIUM | 2023-08-04 | 2023-08-08 |
| CVE-2023-4157 json | CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repositor... | 4.8 - MEDIUM | 2023-08-04 | 2023-11-04 |