CVE-2024-28147

An authenticated user can upload arbitrary files in the upload function for collection preview images. An attacker may upload an HTML file that includes malicious JavaScript code which will be executed if a user visits the direct URL of the collection preview image (Stored Cross Site Scripting). It is also possible to upload SVG files that include nested XML entities. Those are parsed when a user visits the direct URL of the collection preview image, which may be utilized for a Denial of Service attack. This issue affects edu-sharing: <8.0.8-RC2, <8.1.4-RC0, <9.0.0-RC19.

• CWE-434

• http://seclists.org/fulldisclosure/2024/Jun/11
• https://r.sec-consult.com/metaventis
• http://seclists.org/fulldisclosure/2024/Jun/11
• https://packetstormsecurity.com/files/179199
• https://r.sec-consult.com/metaventis

Published

Jun 20, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28141The web application is not protected against cross-site requ…6.3
• CVE-2024-28142Due to missing input sanitization, an attacker can perform c…4.7
• CVE-2024-28143The password change function at /cgi/admin.cgi does not requ…8.4
• CVE-2024-28144An attacker who can spoof the IP address and the User-Agent …5.5
• CVE-2024-28145An unauthenticated attacker can perform an SQL injection by …5.9
• CVE-2024-28146The application uses several hard-coded credentials to encry…8.4
• CVE-2024-28148An authenticated user could potentially access metadata for …4.3
• CVE-2024-28149Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclus…6.5
• CVE-2024-2815A vulnerability classified as critical has been found in Ten…9.8
• CVE-2024-28150Jenkins HTML Publisher Plugin 1.32 and earlier does not esca…4.7
• CVE-2024-28151Jenkins HTML Publisher Plugin 1.32 and earlier archives inva…4.3
• CVE-2024-28152In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e…6.3