GCVE - cpe:2.3:a:omeka:omeka/omeka-s:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:omeka:omeka/omeka-s:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Omeka (`5ecedf76-51f2-50c6-adc0-f7548d7e731a`)
Product	Omeka/Omeka S (`f9685ea3-5418-5f6b-895a-eb01ed521745`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4561`	vulnerable	2026-06-08 06:16:13.001382	Cross-site Scripting (XSS) - Stored in omeka/omeka-s HIGH (7.1) Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4. Published: 2023-08-28T00:00:19.860Z Updated: 2024-10-02T13:39:43.593Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a https://github.com/omeka/omeka-s/commit/4482f4fc0f3a66c5ef058c4be9fabf3c29a105af	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4560`	vulnerable	2026-06-08 06:16:13.000855	Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s MEDIUM (6.5) Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4. Published: 2023-08-28T00:00:20.331Z Updated: 2024-10-02T13:40:44.936Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6 https://github.com/omeka/omeka-s/commit/b3d8871f22e50ff96a7070fd0be18a0df7b6cbe7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4159`	vulnerable	2026-06-08 06:16:11.666822	Unrestricted Upload of File with Dangerous Type in omeka/omeka-s CRITICAL (9.9) Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. Published: 2023-08-04T17:17:21.972Z Updated: 2024-10-09T19:14:28.321Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/e2e2365e-6a5f-4ca4-9ef1-297e3ed41f9c https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4158`	vulnerable	2026-06-08 06:16:11.666254	Cross-site Scripting (XSS) - Stored in omeka/omeka-s MEDIUM (6.4) Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3. Published: 2023-08-04T17:16:44.572Z Updated: 2024-10-09T19:46:08.007Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/e0e462ae-d7cb-4a84-b6fe-5f5de20e3d15 https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4157`	vulnerable	2026-06-08 06:16:11.664856	Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s MEDIUM (5.2) CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3. Published: 2023-08-04T17:15:29.215Z Updated: 2024-10-09T19:46:42.648Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/abc3521b-1238-4c4e-97f1-2957db670014 https://github.com/omeka/omeka-s/commit/8b72619d9731b32dd21ab6dcaa01ccc3bbf0db63	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3982`	vulnerable	2026-06-08 06:09:40.961523	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3981`	vulnerable	2026-06-08 06:09:40.960891	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3980`	vulnerable	2026-06-08 06:09:40.959566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.