En resumen
- CVE-2023-4157 es una vulnerabilidad MEDIO (CVSS 4.8) que afecta a omeka/omeka-s, omeka s (omeka).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.51%, mayor que el 43.9% de las vulnerabilidades.
- Solución: actualizar a 4.0.3 o posterior.
Description
Improper Input Validation in GitHub repository omeka/omeka-s prior to 4.0.3.
NVD description
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free