omeka/omeka-s

GitHub

github.com

Releases46

Frequency2 months 3 weeks

Last Release 7 months ago

Stars492

Omeka S is a web publication system for universities, galleries, libraries, archives, and museums. It consists of a local network of independently curated exhibits sharing a collaboratively built pool of items, media, and their metadata.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-4561 ↗	Aug 28, 2023Monday, 28 August 2023, 01:15	4.8 MEDIUM	—
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.
CVE-2023-4560 ↗	Aug 28, 2023Monday, 28 August 2023, 01:15	6.5 MEDIUM	—
Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
CVE-2023-4159 ↗	Aug 4, 2023Friday, 4 August 2023, 18:15	8.8 HIGH	—
Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3.
CVE-2023-4157 ↗	Aug 4, 2023Friday, 4 August 2023, 18:15	5.2 MEDIUM	—
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.
CVE-2023-4158 ↗	Aug 4, 2023Friday, 4 August 2023, 18:15	5.4 MEDIUM	—
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.
CVE-2023-3980 ↗	Jul 27, 2023Thursday, 27 July 2023, 19:15	4.8 MEDIUM	—
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
CVE-2023-3981 ↗	Jul 27, 2023Thursday, 27 July 2023, 19:15	4.9 MEDIUM	—
Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.
CVE-2023-3982 ↗	Jul 27, 2023Thursday, 27 July 2023, 19:15	4.8 MEDIUM	—
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.