Описание
Islandora 2.0 before 2.4.1 could allow any user to upload content into a repository
Impact
This vulnerability would allow any user, regardless of permissions, to upload content into a repository. This affects installations of Islandora core 2.0 or greater.
Patches
Upgrade immediately to the latest release of Islandora.
Workarounds
In lieu of an upgrade the following module can be leveraged that will resolve the issue until such a time an upgrade can take place.
For more information
If you have any questions or comments about this advisory:
- Open an issue in Islandora
- Contact community@islandora.ca.
Пакеты
Наименование
islandora/islandora
composer
Затронутые версииВерсия исправления
>= 2.0, < 2.4.1
2.4.1
10 Critical
CVSS3
10 Critical
CVSS3