GCVE - cpe:2.3:a:omeka:omeka_s:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:omeka:omeka_s:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Omeka (`5ecedf76-51f2-50c6-adc0-f7548d7e731a`)
Product	Omeka S (`a45a07b5-b0e1-5d9a-a271-e1d58c8439de`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/omeka/omeka-s`	purl2cpe	2026-06-01 10:15:47.691232

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4561`	vulnerable	2026-06-08 06:16:13.001206	Cross-site Scripting (XSS) - Stored in omeka/omeka-s HIGH (7.1) Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4. Published: 2023-08-28T00:00:19.860Z Updated: 2024-10-02T13:39:43.593Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a https://github.com/omeka/omeka-s/commit/4482f4fc0f3a66c5ef058c4be9fabf3c29a105af	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4560`	vulnerable	2026-06-08 06:16:13.000810	Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s MEDIUM (6.5) Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4. Published: 2023-08-28T00:00:20.331Z Updated: 2024-10-02T13:40:44.936Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6 https://github.com/omeka/omeka-s/commit/b3d8871f22e50ff96a7070fd0be18a0df7b6cbe7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4159`	vulnerable	2026-06-08 06:16:11.666776	Unrestricted Upload of File with Dangerous Type in omeka/omeka-s CRITICAL (9.9) Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. Published: 2023-08-04T17:17:21.972Z Updated: 2024-10-09T19:14:28.321Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/e2e2365e-6a5f-4ca4-9ef1-297e3ed41f9c https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4158`	vulnerable	2026-06-08 06:16:11.666292	Cross-site Scripting (XSS) - Stored in omeka/omeka-s MEDIUM (6.4) Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3. Published: 2023-08-04T17:16:44.572Z Updated: 2024-10-09T19:46:08.007Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/e0e462ae-d7cb-4a84-b6fe-5f5de20e3d15 https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4157`	vulnerable	2026-06-08 06:16:11.665623	Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s MEDIUM (5.2) CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3. Published: 2023-08-04T17:15:29.215Z Updated: 2024-10-09T19:46:42.648Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/abc3521b-1238-4c4e-97f1-2957db670014 https://github.com/omeka/omeka-s/commit/8b72619d9731b32dd21ab6dcaa01ccc3bbf0db63	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3982`	vulnerable	2026-06-08 06:09:40.961486	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3981`	vulnerable	2026-06-08 06:09:40.960843	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3980`	vulnerable	2026-06-08 06:09:40.958290	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.