Detections
Analytics
SCA: security update for org.dspace:dspace-jspui (GHSA-763j-q7wv-vf3m)
medium Tenable Self-Hosted Container Security Plugin ID 411856
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- DSpace open source software is a repository application which provides durable access to digital
resources. dspace-jspui is a UI component for DSpace. The JSPUI controlled vocabulary servlet is
vulnerable to an open redirect attack, where an attacker can craft a malicious URL that looks like a
legitimate DSpace/repository URL. When that URL is clicked by the target, it redirects them to a site of
the attacker's choice. This issue has been patched in versions 5.11 and 6.4. Users are advised to upgrade.
There are no known workaround for this vulnerability. (CVE-2022-31193)
See Also
Plugin Details
Severity: Medium
ID: 411856
Version: Revision 1.6
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 8.69
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2022-31193
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/6/2022
Vulnerability Publication Date: 8/1/2022
Reference Information
CVE: CVE-2022-31193
cwe: CWE-601