CVE-2022-31190

DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" object, as long as you know the handle/URL of the withdrawn Item. This vulnerability only impacts the XMLUI. Users are advised to upgrade to version 6.4 or newer.

• CWE-200
• CWE-863

• https://github.com/DSpace/DSpace/commit/574e25496a40173653ae7d0a49a19ed8e3458606.patchPatch, Third Party Advisory
• https://github.com/DSpace/DSpace/pull/2451Patch, Third Party Advisory
• https://github.com/DSpace/DSpace/security/advisories/GHSA-7w85-pp86-p4pqPatch, Third Party Advisory
• https://github.com/DSpace/DSpace/commit/574e25496a40173653ae7d0a49a19ed8e3458606.patchPatch, Third Party Advisory
• https://github.com/DSpace/DSpace/pull/2451Patch, Third Party Advisory
• https://github.com/DSpace/DSpace/security/advisories/GHSA-7w85-pp86-p4pqPatch, Third Party Advisory

Published

Aug 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31185mprweb is a hosting platform for the makedeb Package Reposit…5.3
• CVE-2022-31186NextAuth.js is a complete open source authentication solutio…3.3
• CVE-2022-31187GLPI stands for Gestionnaire Libre de Parc Informatique and …5.4
• CVE-2022-31188CVAT is an opensource interactive video and image annotation…9.8
• CVE-2022-31189DSpace open source software is a repository application whic…5.3
• CVE-2022-3119The OAuth client Single Sign On WordPress plugin before 3.0.…7.5
• CVE-2022-31191DSpace open source software is a repository application whic…6.1
• CVE-2022-31192DSpace open source software is a repository application whic…6.1
• CVE-2022-31193DSpace open source software is a repository application whic…6.1
• CVE-2022-31194DSpace open source software is a repository application whic…7.2
• CVE-2022-31195DSpace open source software is a repository application whic…7.2
• CVE-2022-31196Databasir is a database metadata management platform. Databa…7.5