goobi
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 23, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS
Goobi viewer: Solr injection via unvalidated region parameter in spatial search
Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation
Goobi viewer: OpenID JWT audience not enforced by the verifier
Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters
Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables remote code execution in Goobi viewer
Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer
Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset
Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset
Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection
Monitor goobi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.