CVE-2025-61190: XSS
A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filtertype1 parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61190?
CVE-2025-61190 is classified as a moderate-severity vulnerability due to its potential impact on user data integrity.
How do I fix CVE-2025-61190?
To mitigate CVE-2025-61190, ensure that proper input sanitization is implemented for the filter_type_1 parameter in DSpace JSPUI 6.5.
What types of attacks can result from CVE-2025-61190?
CVE-2025-61190 can be exploited to execute reflected cross-site scripting attacks, allowing an attacker to run malicious scripts in users' browsers.
Which versions of DSpace JSPUI are affected by CVE-2025-61190?
CVE-2025-61190 specifically affects DSpace JSPUI version 6.5.
Are there any similar vulnerabilities to CVE-2025-61190?
Yes, similar vulnerabilities can occur in applications that fail to properly sanitize user input, leading to cross-site scripting risks.