CVE-2023-47271

PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file…

published November 5, 2023

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00618 · 48.9th percentile
Published
2023-11-05T00:00Z
EPSS history
Timeline
  • 05 NOV 00:00Z
    PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file…
    cvelistv5