CVE-2023-4157CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s

Medium · published August 4, 2023

CVSS v3.1
5.2
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2023-08-04T17:15Z
EPSS history
Timeline
  • 04 AUG 17:15Z
    Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
    cvelistv5