CNNVD-202507-2044 Information

CNNVD ID

CNNVD-202507-2044

Related CVE

CVE-2025-53622

• CNNVD Published: 2025-07-15

Description (Chinese)

DSpace是DuraSpace社区的一个开源的交钥匙存储库应用程序。 DSpace 7.6.4之前版本、8.2之前版本和9.1之前版本存在路径遍历漏洞，该漏洞源于路径遍历漏洞，可能导致敏感信息泄露。

Description (English)

DSpace is an open-source turnkey repository application for the DuraSpace community. Pre-DSpace 7.6.4, pre-8.2 and pre-9.1 have a loophole in the path, which stems from the loophole that can lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

路径遍历

Affected Vendor

DuraSpace

Published

2025-07-15

Last Modified

2026-02-24

References

https://github.com/DSpace/DSpace/pull/11038 https://github.com/DSpace/DSpace/security/advisories/GHSA-vhvx-8xgc-99wf https://github.com/DSpace/DSpace/pull/11038.patch https://github.com/DSpace/DSpace/pull/11036 https://github.com/DSpace/DSpace/pull/11037 https://github.com/DSpace/DSpace/pull/11037.patch https://github.com/DSpace/DSpace/pull/11036.patch https://nvd.nist.gov/vuln/detail/CVE-2025-53622

Patch

https://github.com/DSpace/DSpace/releases