CVE-2023-4159
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
The GitHub repository omeka/omeka-s prior to version 4.0.3 has a vulnerability that allows unrestricted file uploads of dangerous types.
Risk Assessment
This vulnerability could lead to malware or system attacks, posing a serious threat to the organization's security.
Recommendation
It is recommended to upgrade to version 4.0.3 or later to mitigate this vulnerability.
Other vulnerabilities in GitHub repository omeka/omeka-s
See all- CVE-2023-4561Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository omeka/omeka-s prior to version 4.0.4, allowing for the storage of malicious code.
- CVE-2023-4560Medium
Improper authorization of an index containing sensitive information exists in the GitHub repository omeka/omeka-s prior to version 4.0.4.
- CVE-2023-4158Medium
CVE-2023-4158 involves a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository omeka/omeka-s prior to version 4.0.3.
- CVE-2023-3982Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository omeka/omeka-s prior to version 4.0.2, allowing for the storage of malicious code.
- CVE-2023-3980Medium
CVE-2023-3980 involves a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository omeka/omeka-s prior to version 4.0.2.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.