CVE-2023-4157

MediumCVSS 5.2

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

35th percentile - higher than 35% of all known CVEs

Summary

CVE-2023-4157 concerns improper neutralization of special elements in output used by a downstream component in the GitHub repository omeka/omeka prior to version 4.0.3.

Risk Assessment

Exploitation of this vulnerability may lead to injection attacks, jeopardizing the integrity and security of the application and user data.

Recommendation

It is recommended to upgrade to version 4.0.3 or later to mitigate this vulnerability.

Original NVD description (English source)

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.