CVE-2023-4157: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

August 4, 2023 (updated October 24, 2023)

Improper Input Validation in GitHub repository omeka/omeka-s prior to 4.0.3.

References

github.com/advisories/GHSA-fxc5-pr68-2px3
github.com/omeka/omeka-s/commit/8b72619d9731b32dd21ab6dcaa01ccc3bbf0db63
huntr.dev/bounties/abc3521b-1238-4c4e-97f1-2957db670014
nvd.nist.gov/vuln/detail/CVE-2023-4157

Code Behaviors & Features

Detect and mitigate CVE-2023-4157 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →